If you use Uber, your personal data along with 57 million other Uber accounts might have been compromised. Uber, who paid hackers $100,000 to hide the data breach that happened in 2016 is still not really being that forthcoming. The hackers gained access to usernames and passwords on a private account of their software development repository on Github.
In a recent blog post, Uber indicated that they didn’t feel the need to contact individuals who were affected by the hack. This departs from the typical procedures in such breaches. Instead, Uber said they are monitoring the affected accounts and have flagged those to provide additional fraud protection.
Vince Gremillion, Cybersecurity expert and Restech President, has indicated that “Uber’s response is not enough.”
At a minimum, Uber should have forced a password reset and sent alerts for affected users to be on the lookout for phishing scams; things like fake notices from Uber to update your account information etc.
WHAT SHOULD YOU DO AS A PRECAUTION?
Since Uber is unwilling to let those affected by the hack know, we suggest assuming you were affected.
First, go in and change your Uber password. Don’t reuse an old one or anything you use on another site. Use something entirely new.
You may want to look at past trips to make sure no one has used your account to take a ride. If you notice a ride you did not take, Uber will refund you but it might be a good indication someone has your credentials.
Additionally, you might want to set up credit monitoring or consider a credit freeze, which would prevent anyone from setting up new credit without your direct permission.
Click here for more tips to protect yourself if you find yourself the victim of a data breach.
{{cta(‘fc62d11e-62b4-40a8-878f-7b6fa7ab7fe8’)}}
Restech provides Total Security Solutions for Law Firms, CPA’s, Financial Services, Credit Unions, Title Companies, Healthcare providers and other small to midsized business. Get enterprise level protection right sized for your small business.