Wednesday, December 6, 2023

Uber Driver Data Stolen Again From the Servers of Law Firm

Uber faces various cyber attacks that result in the disclosure of employee email addresses, company reports, and information related to IT assets.

The servers of Genova Burns, a legal services firm, have been compromised, resulting in the theft of driver data belonging to the company.

Breach Notification

Genova Burns LLC informed the impacted drivers that their information, including their name and either Social Security number or Tax Identification number, which they provided to Uber, has been affected.

On January 31, 2023, the company noticed suspicious activity on their servers and commenced an investigation into the matter.

Forensic and data security experts spearheaded the investigation to determine the extent of the activity.

Upon further examination, it was discovered that the attack had infiltrated the system and extracted data between January 23, 2023 and January 31, 2023.

Genova Burns LLC suspects that the following information provided by the drivers to Uber has been stolen.

“In connection with this legal representation, we received data regarding certain drivers on the Uber platform, which included information about you.”

As a result of the investigation, it was found that the impacted file contains the following information.

  • Name
  • Social Security number
  • Tax Identification Number

“Upon learning of the event, we investigated to determine the nature and scope of the incident and secured the environment by changing all system passwords.”

Software supply chain attacks won’t stop anytime soon, but software vendors can reduce the risk of supply chain attacks with effective security procedures and awareness training.

The world is advancing, and digitalization is taking over. Therefore, software production and management increase daily. Likewise, attackers implement sophisticated tools to infiltrate and inject malicious codes into vulnerable software.

Searching to secure your APIs? – Try Free API Penetration Testing

Related Read:


Latest articles

BlueNoroff: New Malware Attacking MacOS Users

Researchers have uncovered a new Trojan-attacking macOS user that is associated with the BlueNoroff APT...

Serpent Stealer Acquires Browser Passwords and Erases Intrusion Logs

Beneath the surface of the cyber realm, a silent menace emerges—crafted with the precision...

Doppelgänger: Hackers Employ AI to Launch Highly sophistication Attacks

It has been observed that threat actors are using AI technology to conduct illicit...

Kali Linux 2023.4 Released – What’s New!

Kali Linux 2023.4, the latest version of Offensive Security's renowned operating system, has been...

Trickbot Malware Developer Pleads Guilty & Faces 35 Years in Prison

A 40-year-old Russian national, Vladimir Dunaev, pleaded guilty for developing and deploying Trickbot malware....

ICANN Launches RDRS to Assist Law Enforcement Agencies to Discover Private Info

ICANN is a non-profit organization that is responsible for coordinating the global internet's-DNSIP address...

Hackers Use Weaponized Documents to Attack U.S. Aerospace Industry

An American aerospace company has been the target of a commercial cyberespionage campaign dubbed...

API Attack Simulation Webinar

Live API Attack Simulation

In the upcoming webinar, Karthik Krishnamoorthy, CTO and Vivek Gopalan, VP of Products at Indusface demonstrate how APIs could be hacked.The session will cover:an exploit of OWASP API Top 10 vulnerability, a brute force account take-over (ATO) attack on API, a DDoS attack on an API, how a WAAP could bolster security over an API gateway

Related Articles