HackingTechnologyTransportation & LogisticsInformationStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDCriticalContained

UBER TECHNOLOGIES, INC.

bd_dfe6822f4d088126 · schema v1 · pii pii-v1

Severity

Critical

Discovered

Nov 1, 2016

Filed

Nov 21, 2017

To disclose

13 months

Affected

600,000

Linked

6 filings

Confidence

63%

Full breach record for UBER TECHNOLOGIES, INC. →10 incidents on file

Uber Technologies, Inc. notified the California Attorney General that unauthorized actors accessed private cloud storage containing user information, including names and driver's license numbers, for approximately 600,000 US drivers. The access occurred between October 13 and November 15, 2016. Uber offered 12 months of credit monitoring via Experian.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 19 days

discovery → filing · 13 months / 385 days

Oct 13, 2016

Begins

Nov 1, 2016

Discovered

Nov 21, 2017

Filed

vs. sector median

+37 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

New Hampshire State AGbd_5aac63ae95779a492017-11-21Verified
Montana State AGbd_74ccb250c0dca8c32017-11-21Verified
Oregon State AGbd_8cb0530a7d7281d12017-11-21Candidate
Washington State AGbd_cb676ca7c713e68b2017-11-21Verified

Show 1 more filing ↓up to 7d gap

Massachusetts State AGbd_103b55f80b2fd5c62017-11-28 · +7dVerified

Name: UBER TECHNOLOGIES, INC.
norm: uber technologies
Domain: uber.com

Name: UBER TECHNOLOGIES, INC.
norm: uber technologies
Domain: uber.com
Industry: TechnologyllmTransportation & Logisticsllm

Discovered: Nov 1, 2016
Breach occurred: Oct 13, 2016 – Nov 15, 2016
Undetected for: 19 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 600,000nationwide
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1530 Data from Cloud Storage Object
Threat actor: External

During the incident: Made changes to our data storage environment and security procedures to decrease the chance of a similar occurrence in the future
Providing identity theft protection and mitigation services from Experian, including credit monitoring, for twelve (12) months at no cost to you
Changes made: Made changes to our data storage environment and security procedures to decrease the chance of a similar occurrence in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(385 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

New Hampshire State AGNov 21 · first

Montana State AGNov 21 · first

Oregon State AGNov 21 · first

Washington State AGNov 21 · first

California State AGNov 21 · first · this page

Massachusetts State AG+7d

Pattern: first filing Nov 21 (NH), last Nov 28 (MA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-112414
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 21, 2017
Raw hash: f1e61cbfe36233592ca63e013fda857c7e817eda7bd78eecf8eb9167ce120c5d

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityUBER TECHNOLOGIES, INC.

Victim entityUBER TECHNOLOGIES, INC.

Incidentdiscovered Nov 1, 2016

Stated responseMade changes to our data storage environment and security procedures to decrease the chance of a similar occurrence in the future

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov