Uber Admits Covering Up 2016 Hacking, Avoids Prosecution in US Settlement

Uber waited about a year to report the breach, said US Attorney Stephanie Hinds.

By Reuters | Updated: 23 July 2022 11:08 IST

Uber Admits Covering Up 2016 Hacking, Avoids Prosecution in US Settlement

Uber admitted that its personnel failed to report the November 2016 hacking to the US FTC

Highlights

Uber accepted responsibility for covering up a 2016 data breach
The 2016 data breach affected 57 million passengers and drivers
Uber shares closed down 93 cents at $23.30 on Friday

Uber Technologies on Friday accepted responsibility for covering up a 2016 data breach that affected 57 million passengers and drivers, as part of a settlement with US prosecutors to avoid criminal charges.

In entering a non-prosecution agreement, Uber admitted that its personnel failed to report the November 2016 hacking to the US Federal Trade Commission, even though the agency had been investigating the ride-sharing company's data security.

US Attorney Stephanie Hinds in San Francisco said Uber waited about a year to report the breach, after installing new executive leadership who "established a strong tone from the top" regarding ethics and compliance.

Samsung Wins Patent for a Tri-Fold Smartphone With Specialised Barrier Layer for Improved Durability

Hinds said the decision not to criminally charge Uber reflected new management's prompt investigation and disclosures, and Uber's 2018 agreement with the FTC to maintain a comprehensive privacy programme for 20 years.

The San Francisco-based company is also cooperating with the prosecution of a former security chief, Joseph Sullivan, over his alleged role in concealing the hacking.

Uber did not immediately respond to requests for comment.

BluSmart Close to Raising $250 Million, CEO Says

Sullivan was originally indicted in September 2020. Prosecutors said Sullivan arranged to pay the hackers $100,000 (roughly Rs. 79,89,350) in Bitcoin and have them sign nondisclosure agreements that falsely stated they had not stolen data.

Uber had a bounty programme designed to reward security researchers who report flaws, but not to cover up data thefts.

In September 2018, Uber paid $148 million (roughly Rs. 1,182 crore) to settle claims by all 50 US states and Washington, D.C., that it was too slow to disclose the hacking.

Uber shares closed down 93 cents at $23.30 (roughly Rs. 1,800) on Friday. The non-prosecution agreement was disclosed after US markets closed.

© Thomson Reuters 2022

Is the Nothing Phone 1 worth it beyond its design choices? We discuss this on Orbital, the Gadgets 360 podcast. Orbital is available on Spotify, Gaana, JioSaavn, Google Podcasts, Apple Podcasts, Amazon Music and wherever you get your podcasts.

Affiliate links may be automatically generated - see our ethics statement for details.

Cryptocurrency Prices across Indian exchanges

Comments

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.