Uber discloses breach, dozens of drivers affected

Uber Technologies has disclosed another breach. Social Security numbers (SSNs) of 131 Uber drivers have been compromised.

According to the Massachusetts Office of Consumer Affairs and Business Regulation, Uber Technologies reported the breach on March 31. It said 131 residents of Massachusetts were affected, and their SSNs were compromised.

The detailed breach report is not available on the official website. However, judging from the letter circulating the internet, it seems that Uber drivers’ data was stolen from a law firm Genova Burns.

According to the letter, Genova Burns said an authorized third party “gained access to our systems, and certain limited files were accessed or exfiltrated between January 23, 2023, and January 31, 2023.”

Drivers’ names, SSNs, and/or tax identification numbers were among the impacted data.

At the time of writing, Cybernews couldn’t independently verify the letter's origin, first shared by The Register news outlet.

131 is just a drop in the ocean for Uber. In 2016, the personal information of over 57 million users, including 600,000 US driver licenses, was exfiltrated by threat actors.

And in 2022, Uber confirmed a breach of its internal systems.