{"id":3455,"date":"2018-12-13T19:12:54","date_gmt":"2018-12-13T19:12:54","guid":{"rendered":"https:\/\/www.dataleaklawyers.co.uk\/blog\/?p=3455"},"modified":"2018-12-13T19:12:54","modified_gmt":"2018-12-13T19:12:54","slug":"fine-issued-for-uber-cyber-attack","status":"publish","type":"post","link":"https:\/\/www.dataleaklawyers.co.uk\/blog\/fine-issued-for-uber-cyber-attack","title":{"rendered":"Fine issued for Uber cyber attack"},"content":{"rendered":"

A hefty fine has been issued over the 2016 Uber cyber attack as a result of security flaws that could have prevented the breach in the first place.<\/p>\n

The data for some 2.7m Uber customers in the UK was compromised, as were the records for over 80,000 drivers. The fine, issued by the ICO (Information Commissioner\u2019s Office), is small in comparison to potential GDPR fines. This is because the cyber attack took place in 2016 before the new rules came into force.<\/p>\n

Had the cyber attack have happened this year, Uber could have faced fines in the millions.<\/p>\n

<\/p>\n

How the Uber cyber attack happened<\/strong><\/h3>\n

The Uber cyber attack through the use of a \u2018credential stuffing\u2019 attack. Hackers essentially entered username and password combinations into Uber\u2019s cloud storage system until they got a match for an account.<\/p>\n

With the use of strong passwords and defences that can prevent multiple access attempts, this would have been an easy attack to have prevented.<\/p>\n

Data exposed in the Uber cyber attack<\/strong><\/h3>\n

Data that was exposed in the Uber cyber attack for some 2.7m customers included their:<\/p>\n