Uber says 2.7m Brits hit by breach that was covered up

Uber says 2.7m Brits hit by breach that was covered up

Uber says 2.7m Brits hit by breach that was covered up

The organisation has already parted company with its chief security officer, Joe Sullivan, over the 13-month cover-up.

Washington Attorney-General Bob Ferguson said that because the drivers' information that was accessed included names and license numbers, state law required Uber to notify them and his office within 45 days.

"Sometimes the information we get through the app or our website that we use to assign a country code is not the same as the country where a person actually lives", said the firm.

"While Uber has repeatedly asserted that there has been no evidence of fraud or misuse tied to the incident, the concealment of a data breach bears serious consequences under the Data Privacy Act of 2012", according to Privacy Commissioner Raymund Liboro. The ICO said it expects Uber to alert all of the affected users in the United Kingdom as soon as possible.

In a statement to TechCrunch an Uber spokesperson said "We take this matter very seriously and we are happy to answer any questions regulators may have".

"Had it not been for recent media exposure of the Uber hack, class members would, to this day, remain unaware that their personal information had been compromised". People should continue to be vigilant and follow the advice from the National Cyber Security Centre (NCSC).

The Dutch data protection authority will take the lead, as Uber's global headquarters are sited in Amsterdam. With the announcement, San Francisco-based Uber said it concealed the breach for a year after paying $100,000 in ransom for the stolen information to be destroyed.

The government said the new Data Protection Bill would grant the ICO further powers to defend consumer interests, and issue even higher fines of up to £18m, or 4% of an organisation's global turnover in exceptional cases.

The Land Transportation Franchising and Regulatory Board (LTFRB) will conduct its investigation on the data breach involving personal data of users of ridesharing firm Uber in the Philippines.

That revelation prompted a delay in a high-profile trial over whether Uber stole self-driving vehicle technology from Waymo, a Google spinoff.

Related news