Skip to main content
Sister Publication Links
  • Automotive News
  • Automotive News Europe
  • Automotive News China
  • Automobilwoche
Subscribe
  • Subscribe
  • login
  • HOME
  • News
    • News by Brand
    • Auto Shows
    • Canadians Abroad
    • Photo Galleries
    • Automakers
    • Suppliers
    • Retail
    • Dealer Best Practices
    • Government Relations
    • Trade and Tariffs
    • Technology
    • Labour
    • Aston Martin
    • BMW
      • Mini
      • Rolls Royce
    • Daimler
      • Mercedes Benz
      • Smart
    • Ferrari
    • Ford
      • Lincoln
    • General Motors
      • Buick
      • Cadillac
      • Chevrolet
      • GMC
    • Honda
      • Acura
    • Hyundai
      • Kia
    • Mazda
    • Mitsubishi
    • Nissan
      • Infiniti
    • Stellantis
      • Alfa Romeo
      • Chrysler
      • Dodge
      • Fiat Chrysler
      • Jeep
      • Fiat
      • Lancia
      • Maserati
      • Ram
    • Subaru
    • Tata
      • Jaguar
      • Land Rover
    • Tesla
    • Toyota
      • Lexus
    • Volkswagen
      • Audi
      • Bentley
      • Bugatti
      • Lamborghini
      • Porsche
    • Volvo
    • VinFast
    • Toronto Auto Show
  • Opinion
    • Blogs
  • Video
  • Podcasts
  • EVENTS & AWARDS
    • 2022 Auto News Canada All-Stars
    • 2022 Canadians To Watch
    • 2022 Diversity Champions
    • Best Dealerships To Work For
    • Canada Congress
    • Retail Forum: Dealer Discussions
    • Leading Women Roundtables
    • Embracing Diversity Roundtable
    • EVs Decoded
  • Jobs & Classifieds
  • +MORE
    • IN THE DRIVER'S SEAT
    • NEWSLETTERS
    • SUBSCRIBE
    • CLASSIFIEDS
    • PEOPLE ON THE MOVE
    • COMPANIES ON THE MOVE
    • WEBINARS
    • ADVERTISE WITH US
    • CONTACT US
    • DIGITAL EDITION
    • PUBLISHING PARTNERS
MENU
Breadcrumb
  1. Home
  2. Mobility
September 16, 2022 10:27 AM

Hacker claims to breach Uber, security researcher says

Uber said via email that it was 'currently responding to a cybersecurity incident'

The Associated Press
  • Tweet
  • Share
  • Share
  • Email
  • More
    Print
    Reuters

    Uber said Thursday that it reached out to law enforcement after a hacker apparently breached its network. A security engineer said the intruder provided evidence of obtaining access to crucial systems at the ride-hailing service.

    There was no indication that Uber's fleet of vehicles or its operation was in any way affected.

    "It seems like they've compromised a lot of stuff," said Sam Curry, an engineer with Yuga Labs who communicated with the hacker. That includes complete access to the Amazon and Google-hosted cloud environments where Uber stores its source code and customer data, he said.

    Curry said he spoke to several Uber employees who said they were "working to lock down everything internally" to restrict the hacker's access. That included the San Francisco company's Slack internal messaging network, he said.

    He said there was no indication that the hacker had done any damage or was interested in anything more than publicity. "My gut feeling is that it seems like they are out to get as much attention as possible."

    UBER HACKER ALERTED SECURITY

    The hacker had alerted Curry and other security researchers to the intrusion on Thursday evening by using an internal Uber account to comment on vulnerabilities they had previously identified on the company's network through its bug-bounty program, which pays ethical hackers to ferret out network weaknesses.

    The hacker provided a Telegram account address and Curry and other researchers then engaged them in a separate conversation, sharing screenshots of various pages from Uber's cloud providers to prove they broke in.

    The Associated Press attempted to contact the hacker at the Telegram account where Curry and the other researchers chatted with them. But no one responded.

    The New York Times reported that the person who claimed responsibility for the hack said they gained access through social engineering: They sent a text message to an Uber worker claiming to be a company tech employee and persuaded the worker to hand over a password that gave them access to the network.

    The Times said the hacker reported being 18 years old and saying they broke in because the company had weak security.

    One screenshot posted on Twitter and confirmed by researchers shows a chat with the hacker in which they say they obtained the credentials of an administrative user through social engineering.

    Social engineering is a popular hacking strategy, as humans tend to be the weakest link in any network. Teenagers used a similar ploy in 2020 to hack Twitter

    UBER RESPONDING TO 'CYBERSECURITY INCIDENT'

    Uber said via email that it was "currently responding to a cybersecurity incident. We are in touch with law enforcement." It said it would provide updates on its Uber Comms twitter feed.

    The company has been hacked before.

    Its former chief security officer, Joseph Sullivan, is currently on trial on allegations he arranged to pay hackers $100,000 to cover up a 2016 high-tech heist in which the personal information of about 57 million customers and drivers was stolen.

    RECOMMENDED FOR YOU
    Canadian Sea-Doo maker BRP entering mobility market, competing with automakers
    Recommended for You
    BRP Mobility Concepts
    Canadian Sea-Doo maker BRP entering mobility market, competing with automakers
    Left to right: Farid Ahmad, Peter Heasty, Landon Robertson
    Sponsored Content: EXPERT INSIGHTS: Buy/Sell Trends
    Digital Edition
    Jan 2023 Issue
    View latest issue
    See our archive
    Sign up for free newsletters
    EMAIL ADDRESS

    Please enter a valid email address.

    Please enter your email address.

    Please verify captcha.

    Please select at least one newsletter to subscribe.

    You can unsubscribe at any time through links in these emails. For more information, see our Privacy Policy.

    Get Free Newsletters

    Sign up today for our Weekly Newsletter, Daily Newsletter and Breaking News Alerts. We'll deliver the news you need to know straight to your inbox.

    You can unsubscribe at any time through links in these emails. For more information, see our Privacy Policy.

    Subscribe Now

    An Automotive News Canada subscription includes 12 monthly issues – delivered in print to your doorstep, and digitally to your inbox – plus unlimited, 24/7 access to our website.

    Subscribe Now
    Connect With Us
    • Facebook
    • Twitter
    • Instagram

    Our Mission

    The Automotive News Canada mission is to be the primary source of industry news, data and understanding for the industry's decision-makers interested in Canada.

    Contact Us

    1155 Gratiot Ave
    Detroit MI 48207

    1-877-812-1257

    Email Us

    ISSN 2475-5001 (print)
    ISSN 2475-501X (online)

    Resources
    • About us
    • Contact Us
    • Digital Edition Archive
    • Advertise with Us
    • Reprints
    • Ad Choices Ad Choices
    • Sitemap
    Legal
    • Terms and Conditions
    • Privacy Policy
    • Privacy Request
    Automotive News Canada
    Copyright © 1996-2023. Crain Communications, Inc. All Rights Reserved.
    • HOME
    • News
      • News by Brand
        • Aston Martin
        • BMW
          • Mini
          • Rolls Royce
        • Daimler
          • Mercedes Benz
          • Smart
        • Ferrari
        • Ford
          • Lincoln
        • General Motors
          • Buick
          • Cadillac
          • Chevrolet
          • GMC
        • Honda
          • Acura
        • Hyundai
          • Kia
        • Mazda
        • Mitsubishi
        • Nissan
          • Infiniti
        • Stellantis
          • Alfa Romeo
          • Chrysler
          • Dodge
          • Fiat Chrysler
          • Jeep
          • Fiat
          • Lancia
          • Maserati
          • Ram
        • Subaru
        • Tata
          • Jaguar
          • Land Rover
        • Tesla
        • Toyota
          • Lexus
        • Volkswagen
          • Audi
          • Bentley
          • Bugatti
          • Lamborghini
          • Porsche
        • Volvo
        • VinFast
      • Auto Shows
        • Toronto Auto Show
      • Canadians Abroad
      • Photo Galleries
      • Automakers
      • Suppliers
      • Retail
      • Dealer Best Practices
      • Government Relations
      • Trade and Tariffs
      • Technology
      • Labour
    • Opinion
      • Blogs
    • Video
    • Podcasts
    • EVENTS & AWARDS
      • 2022 Auto News Canada All-Stars
      • 2022 Canadians To Watch
      • 2022 Diversity Champions
      • Best Dealerships To Work For
      • Canada Congress
      • Retail Forum: Dealer Discussions
      • Leading Women Roundtables
      • Embracing Diversity Roundtable
      • EVs Decoded
    • Jobs & Classifieds
    • +MORE
      • IN THE DRIVER'S SEAT
      • NEWSLETTERS
      • SUBSCRIBE
      • CLASSIFIEDS
      • PEOPLE ON THE MOVE
      • COMPANIES ON THE MOVE
      • WEBINARS
      • ADVERTISE WITH US
      • CONTACT US
      • DIGITAL EDITION
      • PUBLISHING PARTNERS