Uber Drivers’ Personal Data Stolen in Third-Party Breach

Uber has revealed that the personal data of some of its drivers may have been stolen in a third-party breach. The ride-hailing company stated that an outside legal counsel, Genova Burns LLC, suffered a security incident in March, which may have stolen certain drivers’ information, including social security numbers and/or tax identification numbers.

Impacted drivers who completed trips in New Jersey have been notified that their social security number and/or tax identification number may have been potentially compromised. Uber has offered these drivers complimentary credit monitoring and identity protection services to help mitigate the risk of identity theft or other fraudulent activity.

Genova Burns has stated that they are not aware of any actual or attempted misuse of the information and has confirmed that they are taking additional steps to improve security and better protect against similar incidents in the future.

The incident is a reminder of the importance of cybersecurity and the risks of third-party breaches. While Uber has stated that the security incident did not directly impact it, the potential theft of drivers’ personal information underscores the need for robust cybersecurity measures and regular monitoring of third-party providers’ security protocols.

To protect yourself, it is essential to take proactive steps to safeguard your personal information. This includes regularly changing passwords, enabling two-factor authentication, and monitoring bank and credit card statements for suspicious activity. Limiting the amount of personal information you share online and being cautious of suspicious emails or messages that ask for sensitive data is also advisable.

In light of this incident, all companies must review and strengthen their cybersecurity protocols, particularly those that handle personal data. While Uber has taken steps to address the breach, it is important for affected drivers and all individuals to remain vigilant and proactively protect their personal information.

Frank Jones, CISSP

Frank Jones has loved computers from the age of 13. Frank got his hacking career started when he downloaded a war dialing program that he used to detect dial up modems in his hometown of Chicago. Frank Jones now works as a JAVA coder and cyber security researcher.