September 16, 2022 – Uber confirmed on Thursday it was investigating a network breach, which forced the company to lock down several of its communications and engineering systems.
The cybersecurity breach, first reported by The New York Times, occurred after a hacker compromised an employee’s Slack account. The hacker sent a message to the team, announcing that Uber had suffered a breach. The screenshots of the notification, showing a number of databases the hacker claimed to have accessed, are circulating widely on social media, including Twitter.
“We are currently responding to a cybersecurity incident,” Uber tweeted, turning comments off for the post. “We are in touch with law enforcement and will post additional updates here as they become available.”
We are currently responding to a cybersecurity incident. We are in touch with law enforcement and will post additional updates here as they become available.
— Uber Comms (@Uber_Comms) September 16, 2022
According to reports, the hacker later gained access to the company’s other internal systems. Slack was taken offline shortly after the breach and internal channels were shut to prevent the hacker from accessing them.
The company’s ride-hailing services, however, did not appear to have been affected by the incident.
In October 2016, Uber suffered a massive cybersecurity breach that impacted 57 million customers and employees. Personal information, including phone numbers and email addresses, was compromised in the attack.
The breach first surfaced forth in November of 2017. Later, Uber, to avoid criminal prosecution, admitted to covering up the breach.