Uber’s ex-CSO avoids prison after data breach cover up

After covering up a data breach that impacted the personal records of 57 million Uber passengers and drivers, the company’s former Chief Security Officer has been found guilty and sentenced by a US federal judge.

Read more in my article on the Hot f… Continue reading Uber’s ex-CSO avoids prison after data breach cover up

Uber ex-CISO Charged ‘Obstruction and Misprision,’ say DoJ/FBI

Joe Sullivan, Uber’s former security honcho, stands accused of obstructing justice and covering up a crime.
The post Uber ex-CISO Charged ‘Obstruction and Misprision,’ say DoJ/FBI appeared first on Security Boulevard.
Continue reading Uber ex-CISO Charged ‘Obstruction and Misprision,’ say DoJ/FBI

Former Uber CSO criminally charged with covering up 2016 data breach

U.S. prosecutors have charged the former Chief Security Officer at Uber with allegedly covering up a data breach at the ride-hailing company that exposed information tied to roughly 57 million people. Joe Sullivan was charged Thursday in the U.S. District Court in San Francisco with failing to disclose details of the security incident to the proper authorities. Sullivan, who now works as the chief information security officer at Cloudflare, allegedly committed two felonies by not informing investigators about the hack while they probed the circumstances surrounding a prior data breach. Sullivan was charged with obstruction of justice and misprision of a felony. The maximum sentence if convicted on both charges is eight years in prison. The complaint pertains to a 2016 incident in which two hackers contacted Uber via email to report that they had accessed personal information about 57 million Uber users and drivers, including driver’s license numbers. The […]

The post Former Uber CSO criminally charged with covering up 2016 data breach appeared first on CyberScoop.

Continue reading Former Uber CSO criminally charged with covering up 2016 data breach

Uber hires former NSA counsel Matt Olsen as top security executive

After a tumultuous few months, Uber has a new chief trust and security officer: Matt Olsen, former co-founder off IronNet Cybersecurity and former general counsel of the National Security Agency. Uber CEO Dara Kohsrowshahi tweeted about the new hire after it was initially reported by the New York Times: Thrilled to have Matt Olsen on board as #Uber Chief Trust and Security Officer. He has more than earned the respect of our team at all levels while working with us over the last few months – https://t.co/Xxssp1Wa3r — dara khosrowshahi (@dkhos) August 14, 2018 The search to fill Uber’s CSO position began last November when CSO Joe Sullivan and a slate of security executives left the company following a breach exposing data of 57 million customers at the company and accusations of a $100,000 coverup. Hiring Olsen is one of the most significant steps the ridesharing company has taken in […]

The post Uber hires former NSA counsel Matt Olsen as top security executive appeared first on Cyberscoop.

Continue reading Uber hires former NSA counsel Matt Olsen as top security executive

Uber security executives leave company amid lawsuit and breach investigation

Two top Uber data security officials are resigning from the company and another has taken medical leave in the wake of two major security scandals concerning the ridesharing company, Reuters first reported. Security chief of staff Pooja Ashok and senior security engineer Prithvi Rai are leaving Uber, and Global Threat Operations head Mat Henley is taking medical leave, Reuters said, citing an Uber spokesperson and a separate source. All three employees were working at Uber at the time of an October 2016 breach the company disclosed last month, according to their LinkedIn profiles. The departures follow the dismissal of Chief Security Officer Joe Sullivan and company lawyer Craig Clark in relation to the beach. Sullivan and Clark coordinated to pay hackers $100,000 to delete the data of 57 million users that was maliciously obtained. The breach has prompted outcry from U.S. lawmakers and an an investigation by New York Attorney General […]

The post Uber security executives leave company amid lawsuit and breach investigation appeared first on Cyberscoop.

Continue reading Uber security executives leave company amid lawsuit and breach investigation

Uber paid $100K to cover up 2016 data breach of 57 million users

Uber paid to hide a data breach that revealed sensitive information on 57 million customers and drivers, leading to the dismissal of Chief Security Officer Joe Sullivan. The breach took place in October 2016 and revealed names, email addresses, phone numbers and U.S. driver’s license numbers. Social Security numbers, location data and payment data was not accessed, Uber said. The company paid the hackers $100,000 to stay quiet and delete the data. Uber has not revealed the identities of the hackers. The breach and the payment to hackers was first reported by Bloomberg. New York Attorney General Eric Schneiderman is investigating the hack. According to the report, hackers first breached the ridesharing company through an Uber-owned GitHub account. They found more credentials there, including usernames and passwords to an Amazon Web Services account that held rider and driver information. With the information in hand, they demanded money from the company. “I recently learned […]

The post Uber paid $100K to cover up 2016 data breach of 57 million users appeared first on Cyberscoop.

Continue reading Uber paid $100K to cover up 2016 data breach of 57 million users