Uber Being Sued for $13.5 Million


Uber had revealed in November 2016 that hackers had stolen names, phone numbers and email ids of 57 million customers across the globe. The hackers had also stolen driver licence number of 600,000 drivers in the United States of America. While this hack was covered up for more than an year, Uber had acknowledge paying $100,000 to hackers to ensure that they do not misuse the data. The company had fired chief security officer Joe Sullivan and his senior lawyer Craig Clark for covering the same.

The law
According to Pennsylvania data breach law, a business must inform the victims in case of a data breach of personal information within a reasonable amount of time. They personal information may refers to
first name (or initial) and last name along with
social security number,
driver’s license number (or state ID), or
bank information along with the access code or similar codes.
But no court has ever defined the length of 'Reasonable amount of Time'

The Lawsuit
The lawsuit filed in Philadelphia by Pennsylvania's Attorney General reported that it broke the data breach law by not informing the victims in reasonable amount of time and have asked for compensation for 13,500 Uber drivers of the state of Pennsylvania. It seeks penalty of $1000 for those below 60 and $3000 for those above 60.

"Instead of notifying impacted consumers of the breach within a reasonable amount of time, Uber hid the incident for over a year — and actually paid the hackers to delete the data and stay quiet," state Attorney General Josh Shapiro said in a statement. "That's just outrageous corporate misconduct, and I'm suing to hold them accountable and recover for Pennsylvanians."

The state of Chicago and Washington have also sued Uber earlier.

Follow us on Facebook:- Facebook.com/VAPTHacker

Comments

Popular posts from this blog

Sniffing Android API

Bitcoin mining in nuclear lab