September 27, 2018
Uber has reached a $148 million settlement in a multi-state investigation arising from a 2016 data breach, which exposed the drivers’ license data of 600,000 drivers and other personal data from as many as 57 million customers. Uber learned of the breach when anonymous hackers demanded $100,000 to keep the breach confidential. Uber paid the hackers, but failed to disclose the breach or notify affected parties until November 2017. The $148 million settlement, the largest multi-state data breach settlement to date, will be divided among all 50 states and the District of Columbia. Uber also agreed to implement additional security and compliance procedures. Among the AG announcements: CA, CT, FL, GA, IL, NJ, NY, NC, PA, VA.
Tagged in: Cybersecurity and Data Breaches,