Uber gives update on data breach, believes Lapsus$ may have been involved

Sep. 19, 2022 3:09 PM ETUber Technologies, Inc. (UBER)AMZN, MSFT, CSCO, NVDA, TTWO, OKTABy: Chris Ciaccia, SA News Editor

Uber car waiting for customer

MOZCO Mateusz Szymanski

Uber Technologies (NYSE:UBER) issued an update on the data breach that it recently suffered, indicating that the hacking group known as Lapsus$ may have been involved.

"We believe that this attacker (or attackers) are affiliated with a hacking group called Lapsus$, which has been increasingly active over the last year or so," Uber wrote in its Monday update.

Lapsus$ has been involved in hacking attacks on a number of publicly traded companies in recent months, including Microsoft (MSFT), Cisco (CSCO), Nvidia (NVDA) and Okta (OKTA), among others.

Uber added that is also reason to believe that the cyber attack suffered by Take-Two Interactive (TTWO) also originated from Lapsus$.

San Francisco-based Uber (UBER) also noted that while the investigation into the attack is still ongoing, the hacker did not access any of its public-facing systems that power its apps, user accounts or databases that store user information, like credit card information, bank accounts or trip history.

The attacker did not make any changes to its code nor did it access any customer user data stored on its Amazon (AMZN) Web Services account. However, it looks like the hacker did access some internal Slack messages and downloaded some information from its finance team used to manage invoices.

In addition, the hacker accessed its dashboard at HackerOne, where bugs and vulnerabilities are posted.

The company also said it is working with several digital forensics firms as part of its investigation.

Last week, Uber (UBER) said that it signed a new partnership with Nuro to develop driverless food delivery services.

Recommended For You


To ensure this doesn’t happen in the future, please enable Javascript and cookies in your browser.
Is this happening to you frequently? Please report it on our feedback forum.
If you have an ad-blocker enabled you may be blocked from proceeding. Please disable your ad-blocker and refresh.