Uber says hackers behind information crack were in Canada, Florida
The dual people behind a 2016 information crack during Uber Technologies Inc. were found to be in Canada and Florida, an Uber cyber confidence executive told a U.S. Congress on Tuesday.
About 25 million users influenced by a crack are users located in a United States, John Flynn, arch information confidence officer during Uber, pronounced in created testimony to a Senate Commerce Committee panel.
Uber announced a crack of 57 million worldwide users final November. Of those impacted in a United States, 4.1 million were drivers, according to a testimony.
Uber Canada announced late final year that 815,000 Canadian riders and drivers might have been affected.
The testimony from Flynn is a many extensive open comment to date of a Uber hack, a doing of that stirred newly allocated Uber chief executive Dara Khosrowshahi to glow dual of a company’s tip confidence officials.
‘Bug bounty’ program
An Uber cab is driven divided from New Street Railway Station in Birmingham, U.K. Feb 5. (Darren Staples/Reuters)
Reuters reported in Dec that a 20-year-old male was essentially behind a large information breach, and that he was paid by Uber to destroy a information by a supposed “bug bounty” module routinely used to brand tiny formula vulnerabilities.
Flynn reliable a male who performed information from Uber was in Florida and that his partner, who initial contacted a association on Nov. 14, 2016, to direct a six-figure payment, was located in Canada.
The company’s confidence group done hit with both people and perceived assurances a pilfered information had been broken before profitable a intruders $100,000, Flynn said.
‘The fact that a association took approximately a year to forewarn impacted users raises red flags within this cabinet as to what systemic issues prevented such time-sensitive information from being done accessible to those left vulnerable,’
– Republican Sen. Jerry Moran
Uber has perceived critique for a doing of a breach, and lawmakers in both parties on Tuesday piled on with several admonishments.
“The fact that a association took approximately a year to forewarn impacted users raises red flags within this cabinet as to what systemic issues prevented such time-sensitive information from being done accessible to those left vulnerable,” Republican Sen. Jerry Moran said.
Flynn regularly concurred Uber had done mistakes and that it should not have not used a company’s bug annuity use — designed to prerogative confidence researchers who news flaws found in a company’s program — to negotiate with a hacker seeking to extract money.
“We done a misstep in not stating to consumers, and we done a misstep in not stating to law enforcement,” he said.
The compromised information enclosed names, phone numbers and email addresses though not Social Security numbers or credit label information. The driver’s permit numbers of 600,000 drivers were also compromised.
Article source: http://www.cbc.ca/news/technology/uber-hackers-canada-florida-data-breach-1.4523466?cmp=rss