Uber to pay $148M settlement over 2016 data breach

Uber agreed to pay $148 million to settle a November 2016 data breach that affected about 57 million drivers and riders, New York Attorney General Barbara Underwood said Sept. 26.

Advertisement

Fifty states and the District of Columbia reached the settlement with Uber. The payment relates to $100,000 Uber said it paid hackers to conceal the data breach. The settlement resolves claims that Uber violated state laws on how to notify affected individuals about data breaches.

The settlement also requires Uber to adopt certain model data breach notification and data security practices. Additionally, it requires the company to create an integrity program for employees to report unethical behavior, as well as hire an independent third party to examine its data security practices.

In November 2016, U.S.- and Canada-based hackers told Uber security officials they had downloaded the personal information — including names, license information, email addresses and mobile phone numbers — of 57 million drivers and riders. Uber paid the hackers $100,000 to conceal the breach, according to allegations. Uber ultimately provided notice of the breach a year after the event.

More articles on business:
Kavanaugh hearing expected to slow markets            
3 things to know about fed’s rate hike, outlook
Richard Parsons appointed interim chairman of CBS board

At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.

Advertisement

Next Up in Cybersecurity

Advertisement

Comments are closed.