This article is from the source 'guardian' and was first published or seen on . It last changed over 40 days ago and won't be checked again for changes.
You can find the current article at its original source at https://www.theguardian.com/technology/2017/nov/29/uber-security-breach-london-sadiq-khan-users
The article has changed 6 times. There is an RSS feed of changes available.
| Version 0 | Version 1 |
|---|---|
| Uber says 2.7 million in UK were affected by security breach | |
| (35 minutes later) | |
| Uber has admitted that 2.7 million people in the UK were affected by a 2016 security breach that compromised customers’ information, including names, email addresses and mobile phone numbers. | |
| The ride-hailing company had previously disclosed that 57 million people worldwide were affected by a data breach that it covered up for more than a year. | The ride-hailing company had previously disclosed that 57 million people worldwide were affected by a data breach that it covered up for more than a year. |
| It published an estimate of the number of UK drivers and passengers for the first time, prompting a demand from the mayor of London to move quickly to address customers’ concerns about their private information. | |
| “This latest shocking development about Uber will alarm millions of Londoners whose personal data could have been stolen by criminals,” Sadiq Khan said. | |
| “Uber needs to urgently confirm which of their customers are affected, what is being done to ensure these customers don’t suffer adversely, and what action is being taken to prevent this happening again in the future. | |
| “The public will want to know how there could be this catastrophic breach of personal data security.” | “The public will want to know how there could be this catastrophic breach of personal data security.” |
| The data regulator, the Information Commissioner’s Office (ICO), said it was yet to receive technical reports on the incident and called on the company to alert affected customers as soon as possible. | |
| Uber said the 2.7 million figure was “approximation rather than an accurate and definitive count” because it could not always tell where each customer was located. | |
| It added that experts hired to investigate the data breach did not believe customers’ financial details were leaked. | |
| “Our outside forensics experts have not seen any indication that trip location history, credit card numbers, bank account numbers or dates of birth were downloaded,” the company said, adding that customers who have the Uber app do not need to take any further action. | “Our outside forensics experts have not seen any indication that trip location history, credit card numbers, bank account numbers or dates of birth were downloaded,” the company said, adding that customers who have the Uber app do not need to take any further action. |
| “When this happened, we took immediate steps to secure the data, shut down further unauthorised access, and strengthen our data security.” | |
| The ICO deputy commissioner, James Dipple-Johnstone, said: “On its own this information is unlikely to pose a direct threat to citizens. | The ICO deputy commissioner, James Dipple-Johnstone, said: “On its own this information is unlikely to pose a direct threat to citizens. |
| “However, its use may make other scams, such as bogus emails or calls appear more credible. People should continue to be vigilant and follow the advice from the National Cyber Security Centre (NCSC). | “However, its use may make other scams, such as bogus emails or calls appear more credible. People should continue to be vigilant and follow the advice from the National Cyber Security Centre (NCSC). |
| “As part of our investigation we are still waiting for technical reports which should give full confirmation of the figures and the type of personal data that has been compromised. | “As part of our investigation we are still waiting for technical reports which should give full confirmation of the figures and the type of personal data that has been compromised. |
| “We would expect Uber to alert all those affected in the UK as soon as possible. | “We would expect Uber to alert all those affected in the UK as soon as possible. |
| “We are continuing to work with the NCSC plus other relevant authorities in the UK and overseas to ensure the data protection interests of UK citizens are upheld.” | “We are continuing to work with the NCSC plus other relevant authorities in the UK and overseas to ensure the data protection interests of UK citizens are upheld.” |
| Details about the extent to which Uber’s breach affected UK citizens, as well as revelations that it kept quiet about it for a year, add to a growing list of problems for its new chief executive, Dara Khosrowshahi. | Details about the extent to which Uber’s breach affected UK citizens, as well as revelations that it kept quiet about it for a year, add to a growing list of problems for its new chief executive, Dara Khosrowshahi. |
| In the UK, the company is battling to overturn a decision by Transport for London to revoke its licence, amid concerns about the reporting of crime and background checks on drivers. | |
| The San Francisco-based firm is also due to apply to the supreme court to overturn a ruling that its drivers should be classed as “workers” with improved employment rights. | The San Francisco-based firm is also due to apply to the supreme court to overturn a ruling that its drivers should be classed as “workers” with improved employment rights. |
| • Follow Guardian Business on Twitter at @BusinessDesk, or sign up to the daily Business Today email here. |