Uber Hacked, Data For 57 Million People Exposed

Tuesday, November 21st 2017, 5:59 pm
By: News 9

Hackers have stolen personal data for 57 million Uber customers and drivers, the ride-hailing company said Tuesday.

The stolen information includes names, home addresses, mobile phone numbers and emails of 50 million people who have used Uber around the world. The breach also exposed the driver's licenses and other information for roughly 7 million drivers for the company, including 600,000 in the US.

No Social Security numbers, credit card numbers, bank account numbers, birth dates or trip location data was taken, Uber said.

Bloomberg first reported news of the hack. The news service also said that Uber concealed the attack for more than a year.

"None of this should have happened, and I will not make excuses for it," Dara Khosrowshahi, who Uber named as CEO in September, said in a statement. "While I can't erase the past, I can commit on behalf of every Uber employee that we will learn from our mistakes."

In a statement, Khosrowshahi said he "recently" learned that Uber in late 2016 learned that two individuals outside of Uber accessed user data housed on third-party internet cloud services the company uses. The hack didn't penetrate Uber's corporate systems or infrastructure, he said. 

"At the time of the incident, we took immediate steps to secure the data and shut down further unauthorized access by the individuals," he said. "We subsequently identified the individuals and obtained assurances that the downloaded data had been destroyed."

Uber also tightened security for its cloud-based storage systems, according to the company. 

Khosrowshahi acknowledged that Uber had failed to inform Uber users that their data been stolen in a timely manner, saying that he initiated an investigation of the incident and of how Uber handled it.

"Effective today, two of the individuals who led the response to this incident are no longer with the company," he said.

Bloomberg reported that Uber Chief Security Officer Joseph Sullivan and one of his deputies had been ousted in connection with the breach.

This is a developing story, click here to read more on CBSNews.com