According to a previous story from The New York Times, new Uber’s computer network was compromised on Thursday, forcing the ride-hailing giant to shut down numerous internal communications and engineering systems while it probed the incident.
As of Friday at 10:30 a.m. PT, Uber said its investigation is still underway, but it added that there is “no evidence that the incident involved access to sensitive user data.”
On Friday, Uber launched Uber, Uber Eats, Uber Freight, and Uber Drive. Today, Uber is bringing its internal software tools back online.
Uber has previously stated that it was looking into a cybersecurity problem and was in touch with law police. Uber is apparently working with the FBI to examine the incident. In response to a request for comment on this, Uber was silent right away.
According to the story, which used two workers as sources, the corporation had told staff members not to use the business messaging platform Slack on Thursday. The Times said that other internal systems were also unreachable.
The Times reports that Uber employees got a message on the app that read: “I proclaim I am a hacker and Uber has suffered a data breach” just before Slack was knocked offline on Thursday afternoon. The Times said that the letter also mentioned a number of internal databases that the hacker believed were vulnerable.
The hacker, who identified himself as 18 years old, said that lax security was his driving force, and he supplied photos of internal Uber systems to demonstrate his access, according to the Times.
According to Uber, the hacker took control of a worker’s account before sending the message via the app. According to the publication, the hacker was able to access more internal systems and posted an explicit image on a website with information for staff members.
It’s happened previously to Uber. In relation to a 2016 data breach that the ride-hailing service neglected to report, it reached a $148 million settlement in 2018. 57 million drivers and passengers had personal data stolen from them, including names, email addresses, and driver’s licence numbers.
