2.7 million UK Uber customers affected by hack

ICO and Mayor of London demand answers from beleaguered ride hailing firm

More than 2.7 million of Uber's UK customers and drivers were affected in its 2016 data breach, with their names, email addresses and phone number stolen from the company's servers.

"This is an approximation rather than an accurate and definitive count because sometimes the information we get through the app or our website that we use to assign a country code is not the same as the country where a person actually lives," Uber said in a statement.

"When [the breach] happened, we took immediate steps to secure the data, shut down further unauthorised access, and strengthen our data security," the company added.

However, Uber doesn't think anyone needs to take action because no evidence of fraud or account misuse has been detected. Any accounts that Ubers thinks may have been affected have been flagged for "additional fraud protection".

Advertisement
Advertisement - Article continues below

Uber advised anyone who's a customer of the taxi booking service should monitor their Uber account for any suspicious activity and to contact the company if there appears to be any suspicious activity.

This advice may not go far enough to satisfy the UK's national data protection regulator, the Information Commissioner's Office (ICO).

In a statement, deputy commisioner of the ICO, James Dipple-Johnstone, said: On its own [the stolen] information is unlikely to pose a direct threat to citizens. However, its use may make other scams, such as bogus emails or calls appear more credible. People should continue to be vigilant and follow the advice from the NCSC.

"As part of our investigation we are still waiting for technical reports which should give full confirmation of the figures and the type of personal data that has been compromised.

"We would expect Uber to alert all those affected in the UK as soon as possible."

Approximately 57 million Uber users and drivers around the world were affected by the hack on its systems, which was covered up for more than a year.

"This latest shocking development about Uber will alarm millions of Londoners whose personal data could have been stolen by criminals," said London Mayor, Sadiq Khan. "Uber needs to urgently confirm which of their customers are affected, what is being done to ensure these customers don't suffer adversely, and what action is being taken to prevent this happening again in the future.

"The public will want to know how there could be this catastrophic breach of personal data security."

Featured Resources

The IT Pro guide to Windows 10 migration

Everything you need to know for a successful transition

Download now

Managing security risk and compliance in a challenging landscape

How key technology partners grow with your organisation

Download now

Software-defined storage for dummies

Control storage costs, eliminate storage bottlenecks and solve storage management challenges

Download now

6 best practices for escaping ransomware

A complete guide to tackling ransomware attacks

Download now
Advertisement

Most Popular

Visit/security/identity-and-access-management-iam/354289/44-million-microsoft-customers-found-using
identity and access management (IAM)

44 million Microsoft customers found using compromised passwords

6 Dec 2019
Visit/cloud/microsoft-azure/354230/microsoft-not-amazon-is-going-to-win-the-cloud-wars
Microsoft Azure

Microsoft, not Amazon, is going to win the cloud wars

30 Nov 2019
Visit/hardware/354237/five-signs-that-its-time-to-retire-it-kit
Sponsored

Five signs that it’s time to retire IT kit

29 Nov 2019
Visit/business/business-strategy/354195/where-modernisation-and-sustainability-meet-a-tale-of-two
Sponsored

Where modernisation and sustainability meet: A tale of two benefits

25 Nov 2019