Monday, November 4, 2024
HomeCyber Security NewsUber Driver Data Stolen Again From the Servers of Law Firm

Uber Driver Data Stolen Again From the Servers of Law Firm

Published on

Malware protection

Uber faces various cyber attacks that result in the disclosure of employee email addresses, company reports, and information related to IT assets.

The servers of Genova Burns, a legal services firm, have been compromised, resulting in the theft of driver data belonging to the company.

Breach Notification

Genova Burns LLC informed the impacted drivers that their information, including their name and either Social Security number or Tax Identification number, which they provided to Uber, has been affected.

- Advertisement - SIEM as a Service

On January 31, 2023, the company noticed suspicious activity on their servers and commenced an investigation into the matter.

Forensic and data security experts spearheaded the investigation to determine the extent of the activity.

Upon further examination, it was discovered that the attack had infiltrated the system and extracted data between January 23, 2023 and January 31, 2023.

Genova Burns LLC suspects that the following information provided by the drivers to Uber has been stolen.

“In connection with this legal representation, we received data regarding certain drivers on the Uber platform, which included information about you.”

As a result of the investigation, it was found that the impacted file contains the following information.

  • Name
  • Social Security number
  • Tax Identification Number

“Upon learning of the event, we investigated to determine the nature and scope of the incident and secured the environment by changing all system passwords.”

Software supply chain attacks won’t stop anytime soon, but software vendors can reduce the risk of supply chain attacks with effective security procedures and awareness training.

The world is advancing, and digitalization is taking over. Therefore, software production and management increase daily. Likewise, attackers implement sophisticated tools to infiltrate and inject malicious codes into vulnerable software.

Searching to secure your APIs? – Try Free API Penetration Testing

Related Read:

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Evasive Panda Attacking Cloud Services To Steal Data Using New Toolkit

The Evasive Panda group deployed a new C# framework named CloudScout to target a...

Massive Midnight Blizzard Phishing Attack Using Weaponized RDP Files

Researchers warn of ongoing spear-phishing attacks by Russian threat actor Midnight Blizzard targeting individuals...

Sophisticated Phishing Attack Targeting Ukraine Military Sectors

The Ukrainian Cyber Emergency Response Team discovered a targeted phishing campaign launched by UAC-0215...

Chinese Hackers Attacking Microsoft Customers With Sophisticated Password Spray Attacks

Researchers have identified a network of compromised devices, CovertNetwork-1658, used by Chinese threat actors...

Free Webinar

Protect Websites & APIs from Malware Attack

Malware targeting customer-facing websites and API applications poses significant risks, including compliance violations, defacements, and even blacklisting.

Join us for an insightful webinar featuring Vivek Gopalan, VP of Products at Indusface, as he shares effective strategies for safeguarding websites and APIs against malware.

Discussion points

Scan DOM, internal links, and JavaScript libraries for hidden malware.
Detect website defacements in real time.
Protect your brand by monitoring for potential blacklisting.
Prevent malware from infiltrating your server and cloud infrastructure.

More like this

Evasive Panda Attacking Cloud Services To Steal Data Using New Toolkit

The Evasive Panda group deployed a new C# framework named CloudScout to target a...

Massive Midnight Blizzard Phishing Attack Using Weaponized RDP Files

Researchers warn of ongoing spear-phishing attacks by Russian threat actor Midnight Blizzard targeting individuals...

Sophisticated Phishing Attack Targeting Ukraine Military Sectors

The Ukrainian Cyber Emergency Response Team discovered a targeted phishing campaign launched by UAC-0215...