The attack is said to have occurred in October 2016, with hackers stealing information including riders' names, phone numbers, and email addresses.
Uber this week fired its chief security officer and one of his deputies for hiding the attack. Uber now says it had a legal obligation to report the hack to regulators and to drivers whose license numbers were taken. "We are monitoring the affected accounts and have flagged them for additional fraud protection", the Uber said. "We are changing the way we do business".
In a statement released on Tuesday, Khosrowshahi downplayed the incident, saying that it was the work of "two individuals outside the company" who "inappropriately accessed user data stored on a third-party cloud-based service that we use".
The breach took place under the former chief executive, Travis Kalanick, who found out about it in November 2016. The incident did not breach our corporate systems or infrastructure.
The nature of the hack is relatively straightforward, according to Bloomberg: hackers with access to a GitHub code repository used by Uber engineers were able to glean login credentials to an Amazon cloud computing server, from which the hackers stole a list of rider and driver data.
"The Good Place" Renewed for Season 3 on NBC
We're obviously excited for more Mars to come to fruition, but we're more than happy to be glued to The Good Place in the meantime.
Uber officials now admit the company should've come clean at the time.
The drivers' stolen information also including 600,000 U.S. driver's license numbers.
Uber said other information, like credit card, bank account and Social Security numbers, do not appear to have been stolen in the 2016 hack. From there, the hackers discovered an archive of rider and driver information. At the time of the incident, we took immediate steps to secure the data and shut down further unauthorized access by the individuals. And there have been no signs of fraud, according to Uber.
As part of Khosrowshahi's effort to put Uber on a legally sound path, the company hired Matt Olsen, formerly general counsel at the National Security Agency and director of the National Counterterrorism Center, as an adviser.
'While I can't erase the past, I can commit on behalf of every Uber employee that we will learn from our mistakes, ' Khosrowshahi said in the emailed statement.