Uber informs regulator 2.7mn users in United Kingdom affected by 2016 breach

Uber informs regulator 2.7mn users in United Kingdom affected by 2016 breach

Just days after Uber admitted of a massive cyberattack and breach of personal data of 50m users and 7m drivers globally, the ride sharing firm has said today that in that breach personal data of approximately 2.7m people in the United Kingdom has been exposed.

Because Washington's data breach law does not define "personal information" as including names, email addresses, and telephone numbers, the complaint filed by Washington Attorney General Bob Ferguson relates only to the Uber drivers residing in Washington.

Uber users and drivers in this country accounted for almost half of the 57 million total affected by the hack on its systems, which was covered up for more than a year. "We are monitoring the affected accounts and have flagged them for additional fraud protection".

In Britain, Uber drew around 2.85 million users, on average, over the past three months, according to web and mobile app traffic measurement firm SimilarWeb, indicating that most British Uber users were likely caught up in the breach. If that penalty were applied to each of the affected drivers in Washington, it would total almost $22 million in penalties.

"Washington law is clear: When a data breach puts people at risk, businesses must inform them", Ferguson said in the release.

Washington is the latest state to take Uber to court over its hidden data breach.

Currently, ICO is waiting on technical reports for full confirmation on the damage, including exact details on compromised personal information. Under such a theory, he argues that Uber should face a penalty of several millions of dollars.

"We have seen no evidence of fraud or misuse tied to the incident".

"When [the breach] happened, we took immediate steps to secure the data, shut down further unauthorised access, and strengthen our data security", the company added.

In a statement, Uber said the 2.7 million figure was still an approximation, not an accurate or definitive number. "We are committed to changing the way we do business, putting integrity at the core of every decision we make, and working hard to re-gain the trust of consumers".

That revelation prompted a delay in a high-profile trial over whether Uber stole self-driving auto technology from Waymo, a Google spinoff.