Uber paid $ 100,000 to a hacker not to reveal customer data

Last year, Uber received an email from an anonymous person demanding money in exchange for the stolen user database.

Uber would have paid the hacker 100, 000 dollars through the HackerOne platform

It turns out that a 20-year-old boy from Florida, with the help of another, violated the Uber system last year and the company paid him a large sum of money to destroy the data and keep the incident a secret.

Last week, Uber announced that a massive data breach in October 2016 exposed the personal data of 57 million customers and drivers and that it paid two hackers $ 100, 000 in ransom to destroy all information.

However, the onboard transport company did not reveal identities or any information about the hackers or how the payment was made.

What really happened?

Now, two unknown sources familiar with the incident have told Reuters that Uber paid the Florida Florida hacker through the HackerOne platform, a service that helps companies resolve vulnerabilities in their systems and that rewards hackers.. The name of this hacker and that of his assistant have not come out.

Uber and HackerOne know the hacker's true identity, but decided not to follow through with any lawsuits, as the individual did not appear to pose any future threats to the company.

The source also claims that the computer of the hacker in question was subjected to a forensic analysis to make sure that all the data had been erased and that a nondisclosure agreement was signed to prevent future illicit acts.

The hacker had 57 million user mobile phone numbers in his possession and exposed the data of 600, 000 drivers, including their driver's license numbers.

TheHackerNews Font