# The company’s managing counsel of data private Katherine Tassi, confirmed that the information of over 50,000 of its drivers has been compromised.
The breach was identified on September 17 and then upon further investigation the company found out that the database that was affected contained names and license plates of “a small percentage of current and former driver partners.”
Uber is in the process of notifying the affected drivers and have assured that there has been no misuse of the information yet. Immediately upon discovery they changed the access protocols for the database, removing the possibility of unauthorized access.
They have filed a “John Doe” lawsuit in order to indentify the indentity of hackers. There is no proof that any customer data may have been leaked but we’ll update once we have any more information. The cab company is also offering a free one-year of membership of Experian’s ProtectMyID Alert, which is an identity theft protection service. Meanwhile, here’s the timeline of events as posted on their blog:
- On September 17, 2014, we discovered that one of our databases could potentially have been accessed by a third party.
- Upon discovery we immediately changed the access protocols for the database and began an in-depth investigation.
- Our investigation revealed that a one-time unauthorized access to an Uber database by a third party had occurred on May 13, 2014.
- Our investigation determined the unauthorized access impacted approximately 50,000 drivers across multiple states, which is a small percentage of current and former Uber driver partners.
- The files that were accessed contained only the name and driver’s license number of some driver partners.
- To date, we have not received any reports of actual misuse of any information as a result of this incident, but we are notifying impacted drivers and recommend these individuals monitor their credit reports for fraudulent transactions or accounts.
- Uber will provide a free one-year membership of Experian’s® ProtectMyID® Alert. If impacted driver partners have questions or need an alternative to enrolling online, please call (877) 297-7780 and provide the Engagement number listed in the notification letter.
- We have also filed what is referred to as a “John Doe” lawsuit so that we are able to gather information that may lead to confirmation of the identity of the third party.