Reference no: EM133030131

CASE STUDY #1: Uber Announces New Data Breach Affecting 57 Million Riders and Drivers

What was stolen?

Ridesharing companyUber Technologies, Inc. has disclosed that hackers have stolen the personal information of about 57 million customers and drivers, according to a report by Bloomberg News. The news outlet also reported that Uber discovered the data breach in late 2016 and then waited to disclose the news almost a year later.

Chief Executive Officer Dara Khosrow Shahi states in a press release on Uber's website that the stolen information included the following:

• The names and driver's license numbers of around 600,000 drivers in the United States were stolen. It is important to note that the driver's license numbers affect the drivers working for Uber and not their ridesharing customers.
• Aside from the driver's license numbers, other personal information of all 57 million Uber riders and drivers around the world was compromised: names, e-mail addresses, and mobile phone numbers.
• According to the company's statement: "Our outside forensics experts have not seen any indication that trip location history, credit card numbers, bank account numbers, Social Security numbers or dates of birth were downloaded."

Uber rider or driver?

For Uber riders, the company says it doesn't believe affected individuals need to take action. "We have seen no evidence of fraud or misuse tied to the incident," its statement to riders said. "We are monitoring the affected accounts and have flagged them for additional fraud protection."

Uber has stated that it's notifying affected drivers whose driver's license numbers were accessed and are providing them with free credit monitoring and identity theft protection service. The company is providing additional information for its drivers on its website.

How did the Uber breach happen?

Uber said two (2) people who didn't work for the company accessed the data on a third-party cloud-based service that Uber uses. The company also said that outside forensics experts had not seen evidence that the hackers accessed other types of information.

Study Questions:

1. What is the write-up all about? What technology-related issue/s is/are apparent?
2. What possible impacts or problems may arise in conjunction with the data breach?
3. How can Uber Technologies, Inc. and other similar businesses prevent such from happening again? What measures can you recommend?
4. Considering this scenario, would you consider technological developments as advantageous? Why or why not? Justify your responses.