Uber informs regulator 2.7mn users in United Kingdom affected by 2016 breach

Nov 30, 2017, 12:39
Uber informs regulator 2.7mn users in United Kingdom affected by 2016 breach

European data protection authorities said Wednesday that they are pooling their resources to probe Uber's recently disclosed data breach, which has put the ride-sharing company in regulators' crosshairs.

In Britain, Uber drew around 2.85 million users, on average, over the past three months, according to web and mobile app traffic measurement firm SimilarWeb, indicating that most British Uber users were likely caught up in the breach.

The lawsuit alleges that Uber experienced a smaller data breach in 2014 and, although the company vowed to update its security practices in order to meet industry standards, it failed to do so, leading to the 2016 breach, NBC Chicago noted.

The data breach suffered by taxi hailing firm Uber looks to have affected millions of United Kingdom users, according to the latest update. With investigations under way by the attorneys general of Connecticut, Illinois, Massachusetts, Missouri, New Mexico, and NY, there will likely be more on this front soon. "Consumers expect and deserve protection from disclosure of their personal information". Almost 11,000 drivers in the state were affected.

Under Washington law, the breach of names, phone numbers and addresses does not require notification, Ferguson said, but the driver's license numbers do. Under such a theory, he argues that Uber should face a penalty of several millions of dollars. With the announcement, San Francisco-based Uber said it concealed the breach for a year after paying $100,000 in ransom for the stolen information to be destroyed. NY fined the company US$20,000 past year over a 2014 data breach.

It also notes that Uber has run into trouble before for failing to notify users.

The NPC considers Uber as a Personal Information Controller and should provide detailed information on the nature of the incident, the scope of measure, and the remedial measures taken.

The lawsuit was filed Tuesday in King County Superior Court.

"We have seen no evidence of fraud or misuse tied to the incident".