Uber is in trouble: The key database hacked, extremely sensitive data is out in public domain

Uber is once again hacked but this time extremely sensitive data related to business is out in the public domain. The company has suspended all internal communications to investigate the matter.

Must Read

Uber Technologies Inc. shuts down its internal Slack messaging amid the investigation related to the cybersecurity attack by a hacker who allegedly claimed to have accessed sensitive company information.

According to one person familiar with the matter, employees of Uber had left stunned when they received a Slack message on Thursday from an unknown individual claiming that “I am a hacker.” The perpetrator claimed to have gained access to all internal databases and an employee’s account.

According to the New York Times, the cyber attacker was an 18-year-old who infiltrated many internal systems and released snapshots of emails as well as code repositories on the internet to support his claims.

Sam Curry, a Yuga Labs‘ researcher, stated that the hacker or hackers had access to Uber’s cloud infrastructure hosted on Amazon and Google. He also claimed to have been in touch with the attacker.

The criticality of the situation can be well understood from the fact that hackers also gained access to the HackerOne system, which allows Uber to offer a bug bounty program, in which ethical hackers are rewarded for reporting vulnerabilities.

This is extremely concerning for Uber considering the depth of the hacking. Almost everything related to their business and code is out in open for people.

Curry has revealed that almost everything is compromised.

Experts are suspecting that gaining access to all HackerOne’s reports allowed hackers to make use of all identified vulnerabilities to gain access.

After the sensitive information went viral on social media and the internet, Uber was left with no other option but to confirm the breach but declined to provide more details.

According to Uber’s Twitter account, the company has contacted law enforcement and frozen all Slack communications as it investigates the claims of the hacker and understands the depth of the damages.

The incident, however, has no impact on the services provided to its customers. People claimed that Uber’s ride-hailing services and food delivery services were operating as usual around the globe.

Sensing the complexity of the situation, HackerOne was quick to react and assured all of its customers of the safety of their data and information.

HackerOne is there for its customers. We’re in close touch with Uber’s security staff, have locked down their data, and will continue with their investigation,” Chris Evans, Chief Hacking Officer of HackerOne, said.

This is not the first time Uber came on hackers’ radar. Uber had to cough up $148 million to settle claims relating to a large-scale data leak that exposed the personal information of more than 25 million US users in 2016.


Please enter your comment!
Please enter your name here

- Advertisement -

Latest News

Retail App Downloads Q1 2023: Chinese apps dethroned Amazon, Walmart in the US

Retail is one of the fastest-growing industries in the world. With the advent of the digital age, retailers are...
- Advertisement -

In-Depth: Dprime

Elon has pressed the Reset Button to redefine Twitter

When Elon Musk first expressed his interest in acquiring Twitter early this year, little did anyone know the level of impact on the future...



More Articles Like This