<< Hidalgo v. Arizona | Main | The Blue Slip Dies Quietly >>

Assurances from Cyber-Burglars?

Greg Bensinger and Robert McMillan report for the WSJ:

Uber Technologies Inc. on Tuesday revealed it paid hackers $100,000 in an effort to conceal a data breach affecting 57 million accounts one year ago, a disclosure that adds to a string of scandals and legal problems for the world's most highly valued startup.

The ride-hailing firm said it fired its chief security officer, Joe Sullivan, and deputy Craig Clark for their roles in the breach and for covering it up.

In addition to the names, emails and phone numbers of millions of riders, about 600,000 drivers' license numbers were accessed, Uber said. Uber said financial information such as credit cards and Social Security numbers weren't taken. Uber said it identified the hackers and "obtained assurances" they had destroyed the stolen data.

Oh, well, if they obtained assurances from the criminals that makes me feel so much better.
There is nothing in the story indicating whether they have reported the identity of the hackers to authorities, whether they are in a place where they are subject to prosecution or extradition, or whether any effort to prosecute them has commenced.  Hackers should go to prison for multiple years and not allowed any computer access while they are in prison, so that their skills are obsolete by the time they get out.

I have used Uber primarily for my ground transportation when I travel, but I think I'm going to be leaning more toward Lyft from here on out.

Leave a comment

Monthly Archives