uber in legal crosshairs over hack coverup
Last Updated : GMT 09:40:38
Themuslimchronicle, themuslimchronicle
Themuslimchronicle, themuslimchronicle
Last Updated : GMT 09:40:38
Themuslimchronicle, themuslimchronicle

at the ride-sharing giant

Uber in legal crosshairs over hack cover-up

Themuslimchronicle, themuslimchronicle

Themuslimchronicle, themuslimchronicleUber in legal crosshairs over hack cover-up

Uber is now the target of two state probes into its cover-up of a massive hack last year
San Francisco - Muslimchronicle

Two US states said Wednesday they are investigating Uber's cover-up of a hack at the ride-sharing giant that compromised the personal information of 57 million users and drivers.

Uber purportedly paid data thieves $100,000 to destroy the swiped information -- and remained quiet about the breach for a year.

That decision evidently came despite a promise by the firm to "adopt leading data security protection practices" in a settlement with New York attorney general Eric Schneiderman.

Schneiderman and his counterpart in Connecticut, George Jepsen, on Wednesday told AFP that Uber is the target of probes in their states over the hidden hack.

"None of this should have happened, and I will not make excuses for it," Uber chief executive Dara Khosrowshahi, who took over at the company in August, said Tuesday.

Two members of the Uber information security team who "led the response" that included not alerting users about the data breach were let go from the San Francisco-based company effective Tuesday, according to Khosrowshahi.

The Uber chief said he only recently learned that outsiders had broken into a cloud-based server used by the company for data and downloaded a "significant" amount of information.

Stolen files included names, email addresses, and mobile phone numbers for riders, and the names and driver license information of some 600,000 drivers, according to Uber.

Uber paid the hackers $100,000 to destroy the data, not telling riders or drivers whose information was at risk, according to a source familiar with the situation.

Co-founder and ousted chief Travis Kalanick was advised of the breach shortly after it was discovered, but it was not made public until Khosrowshahi learned of the incident, the source confirmed.

- Promise to protect -

In early 2016, Schneiderman announced a settlement with Uber stemming from an investigation into the company's handling and protection of riders' personal information.

The probe was prompted by word of a hack, and by reports that Uber executives were able to track the locations of riders in real-time using a tool known internally as "God View."

The settlement required Uber to better protect rider data, and pay $20,000 for failing to tell drivers about the 2014 data breach in a timely manner.

Schneiderman's office determined that the earlier hack took advantage of access information posted by an Uber engineer at software development platform Github.

Computer security specialists interviewed by AFP said the recent breach apparently involved a similar slip with a password that was taken from Github and used to get into Uber data stored in the cloud at Amazon Web Services.

"The fact that attackers were able to compromise an Amazon Web Services account and not come away with credit card numbers, social security numbers, and other highly sensitive information could mean that Uber had controls in place to keep this kind of data very well-secured," said Covata vice president of security Mike Fleck.

"It’s also possible that the attackers just didn't look very hard and Uber got lucky."

Hackers are known to take seemingly low-value information, such as email addresses, and build on them with what they can find or steal elsewhere to prey on victims, according to McAfee vice president of labs Vincent Weafer.

"On the hacker side, there is aggregation, tying disparate data sets together," Weafer said.

"There is no such thing as benign information; we really have to take better care."

Law firm Keller Rohrback put out word on Wednesday that it is looking into the potential for a class action suit against Uber.

"By choosing not to disclose this massive data breach and attempting to mitigate the breach by paying the hackers to destroy the data, Uber has essentially rolled the dice with its customers' and drivers' personal identities," law firm partner Cari Campen Laufenberg said in a release.

State law in Uber's home state of California calls on companies to disclose big data breaches without unreasonable delay, meaning the handling of the hack could herald a rough stretch of road there.

source: AFP

themuslimchronicle
themuslimchronicle

Name *

E-mail *

Comment Title*

Comment *

: Characters Left

Mandatory *

Terms of use

Publishing Terms: Not to offend the author, or to persons or sanctities or attacking religions or divine self. And stay away from sectarian and racial incitement and insults.

I agree with the Terms of Use

Security Code*

uber in legal crosshairs over hack coverup uber in legal crosshairs over hack coverup

 



Themuslimchronicle, themuslimchronicle

GMT 09:23 2017 Wednesday ,19 April

1105 food baskets distributed in Yemen

GMT 09:35 2018 Monday ,08 January

Trump marijuana policy reversal stokes fears

GMT 11:09 2017 Saturday ,16 December

Russia poses risk to undersea cables: UK defense chief

GMT 09:56 2017 Thursday ,02 November

Digital subscriber gains rev up NY Times profit

GMT 01:38 2016 Thursday ,29 December

Iraqi President meets Kuwaiti Foreign Minister

GMT 17:37 2017 Tuesday ,21 February

Le Pen refuses to wear veil, fails to meet with Mufti

GMT 01:48 2016 Monday ,13 June

Pioneering solar pilots 'make sci-fi a reality'

GMT 18:45 2016 Wednesday ,21 December

Several Qaeda militants killed in drone strike

GMT 07:28 2018 Thursday ,11 January

As US freezes aid, Pakistan dismisses economic fears

GMT 11:14 2017 Sunday ,12 March

My video is flagrant but smashed the charts

GMT 09:21 2018 Wednesday ,10 January

unveils London boutique and appoints MG Empower

GMT 07:48 2018 Thursday ,04 January

L’Oréal Professionnel unveils Alexa

GMT 07:41 2017 Saturday ,19 August

Brief tourism impact from Spain attacks

GMT 00:02 2017 Friday ,22 December

UK-Iranian prisoner could be released

GMT 21:53 2016 Tuesday ,14 June

Israeli tech second only to Silicon Valley

GMT 00:25 2017 Friday ,27 October

Ex-HSBC executive can face US extradition: UK court

GMT 07:44 2017 Wednesday ,20 September

Iran asks award-winning film-maker to report to prosecutor

GMT 10:34 2017 Saturday ,11 November

Politics free? Even country music awards poke Trump

GMT 07:59 2017 Sunday ,17 December

Embassy in London marks Accession, National Days
Themuslimchronicle, themuslimchronicle
Themuslimchronicle, themuslimchronicle
 
 Themuslimchronicle Facebook,themuslimchronicle facebook  Themuslimchronicle Twitter,themuslimchronicle twitter Themuslimchronicle Rss,themuslimchronicle rss  Themuslimchronicle Youtube,themuslimchronicle youtube  Themuslimchronicle Youtube,themuslimchronicle youtube

Maintained and developed by Arabs Today Group SAL.
All rights reserved to Arab Today Media Group 2023 ©

Maintained and developed by Arabs Today Group SAL.
All rights reserved to Arab Today Media Group 2023 ©

muslimchronicle muslimchronicle muslimchronicle muslimchronicle
themuslimchronicle themuslimchronicle themuslimchronicle
themuslimchronicle
بناية النخيل - رأس النبع _ خلف السفارة الفرنسية _بيروت - لبنان
themuslimchronicle, themuslimchronicle, themuslimchronicle