Uber has revealed that, in late 2016, two hackers stole email addresses and phone numbers from Uber rider accounts, and the license numbers from U.S. driver accounts. Uber claims no credit card information, location data, or social security numbers were compromised. Yet, instead of disclosing the attack when it happened, Uber paid the hackers $100,000 to delete the data and keep it quiet.

From Bloomberg:

Uber said it believes the information was never used but declined to disclose the identities of the attackers.

"None of this should have happened, and I will not make excuses for it," Dara Khosrowshahi, who took over as chief executive officer in September, said in an emailed statement. "We are changing the way we do business."

Uber's co-founder and former CEO, Travis Kalanick, learned of the attack a year ago.

Here's how the hack went down: Two attackers accessed a private GitHub coding site used by Uber software engineers and then used login credentials they obtained there to access data stored on an Amazon Web Services account that handled computing tasks for the company. From there, the hackers discovered an archive of rider and driver information. Later, they emailed Uber asking for money, according to the company.

The company claims it took steps to lock down its data and prevent any further unauthorized access.

Khosrowshahi has fired chief security officer Joe Sullivan and Craig Clark, a senior lawyer that reported to Sullivan.

Uber as also posted a statement to its company website which, along with an apology, reads:

You may be asking why we are just talking about this now, a year later. I had the same question, so I immediately asked for a thorough investigation of what happened and how we handled it. What I learned, particularly around our failure to notify affected individuals or regulators last year, has prompted me to take several actions:

  • I've asked Matt Olsen, a co-founder of a cybersecurity consulting firm and former general counsel of the National Security Agency and director of the National Counterterrorism Center, to help me think through how best to guide and structure our security teams and processes going forward. Effective today, two of the individuals who led the response to this incident are no longer with the company.
  • We are individually notifying the drivers whose driver's license numbers were downloaded.
  • We are providing these drivers with free credit monitoring and identity theft protection.
  • We are notifying regulatory authorities.
  • While we have not seen evidence of fraud or misuse tied to the incident, we are monitoring the affected accounts and have flagged them for additional fraud protection.

This is a complete and utter cluster. The breach was bad enough. The cover-up, a potential show-stopper.

Uber was at the forefront of a logistical revolution. They completely transformed the way people arranged for, paid for, and engaged with transportation services. But under its original leadership, it also accumulated a startling number of scandals. And the number of times it violated customer trust and good faith is staggering. This is just the garbage cherry on top of the unacceptable sundae.

If the new leadership had a lot of rebuilding to do before, it has even more now. The question is, how many of us will give them yet another chance?

How to delete your Uber account

Latest And Best Prime Day Deals

It might be Prime Day, but this Instant Pot deal is available to everyone
Instant Pot 3-Quart Duo Mini Pressure Cooker
$39.95 $65.00 Save $25

This 3-quart multi-cooker is perfect for smaller households or serving sizes, and today's deal beats the others we've seen.

Unlock voice control with Echo device deals and $5 Amazon smart plugs
Amazon Echo devices bundled with $5 smart plugs

Amazon's Smart Plug lets you start voice controlling anything plugged into it by asking an Alexa-compatible device, and today's deal lets you snag one for only $5 with purchase of select Echo devices.

Be more productive with a year of Office 365 Home and a free $50 Amazon gift card
Office 365 Home 12-month subscription and $50 Amazon gift card
$99.99 $150.00 Save $50

The subscription works with up to six people, but that card can be all yours.

Amazon's Fire TV Cube is down to just $70 thanks to this Prime Day deal
Amazon Fire TV Cube
$69.99 $119.99 Save $50

Grab TCL's 32-inch 720p Roku TV for less than $100 in this Prime Day Lightning deal
TCL 32S325 32-inch 720p Roku TV
$99.99 $130.00 Save $30

Act fast while you can. These Lightning deals tend to sell out quick.

The Ring Alarm security system is reaching new low prices for Prime Day
Ring Alarm home security systems

Various configurations of the Ring Alarm are discounted to their best prices yet exclusively for Prime members at Amazon through Tuesday night to help keep your home secure.

The Sonos Beam Prime Day deal includes a $40 discount and 2 $50 Amazon gift cards
The Sonos Beam Prime Day deal includes a $40 discount and $100 in Amazon gift cards
$359.00 $499.00 Save $140

That's just so much savings in one deal. You'll have to wait for the physical gift cards, but that's basically $100 to spend however you want.

Prime Day dropped this PlayStation 4 console bundle to just $250
PlayStation 4 Slim 1TB console with Marvel's Spider-Man and Horizon Zero Dawn
$249.99 $359.98 Save $110

This deal on the PlayStation 4 Slim console saves you $50 off its regular price while also including Marvel's Spider-Man and Horizon Zero Dawn Complete Edition for free. You'll just need an Amazon Prime membership to snag it.

More Prime Day Deals