According to a recent report, hackers stole the personal data of 57-million Uber customers and drivers last year.
The massive breach occurred in October 2016 and included names, email addresses, and phone numbers of 50-million Uber riders from around the world, Uber confirmed to Bloomberg. In addition, personal information for seven-million drivers was also obtained, including 600,000 U.S. driver’s license numbers. The only good news from all this? No Social Security numbers, credit card information, trip location details, or other data were taken as part of the hack.
In order to keep the breach quiet, Uber paid the hackers $100,000. The company believes the information was never used, but declined to disclose the identities of the hackers. After Uber disclosed the hack, New York Attorney General Eric Schneiderman launched an investigation into the hack.
This week, the company has fired its chief security officer and one of his deputies for their roles in keeping the hack a secret. Uber did fail to report the hack of driver’s license information, even though it was obligated to do so.
Bloomberg reports Uber plans to release a statement to customers and will provide drivers whose licenses were compromised with free credit monitoring and identify theft protection.