Washington,
\nThe two people who hacked ride-hailing firm Uber\u2019s data in 2016 were in Canada and Florida at the time, a company security executive told a US congressional committee on Tuesday.<\/p>\n
About 25 million people whose data was compromised in the breach live in the United States, Uber Technologies Inc chief information security officer John Flynn said in written testimony to a Senate Commerce Committee panel.<\/p>\n
Of those, 4.1 million were drivers, said Flynn, whose testimony described new details about the hack, the handling of which prompted newly appointed Uber Chief Executive Officer Dara Khosrowshahi to fire two top security officials.<\/p>\n
Uber disclosed the breach of 57 million worldwide users in November, about a year after it occurred.<\/p>\n
Reuters reported in December that a 20-year-old man was primarily behind the breach, and that he was paid by Uber to destroy the data through a so-called \u201cbug bounty\u201d program, which is designed to reward researchers for uncovering security vulnerabilities.<\/p>\n
Flynn confirmed the man who obtained data from Uber was in Florida and revealed that his partner, who first contacted the company on November 14, 2016, to demand a six-figure payment, was in Canada.<\/p>\n
Uber\u2019s security team made contact with both people and received \u201cassurances\u201d the pilfered data had been destroyed before paying them $100,000, Flynn said. Sources familiar with the breach told Reuters in December the company did a forensic analysis of the Florida hacker\u2019s computer to verify the deletions.<\/p>\n
A Canadian Royal Canadian Mounted Police representative said she had no immediate comment on the case.<\/p>\n
Flynn said Uber had made mistakes, including paying the hackers through its \u201cbug bounty\u201d program.<\/p>\n
\u201cWe made a misstep in not reporting to consumers, and we made a misstep in not reporting to law enforcement,\u201d Flynn said.<\/p>\n
Republican and Democratic lawmakers admonished Uber for its delay in disclosing the breach.<\/p>\n
\u201cThe fact that the company took approximately a year to notify impacted users raises red flags within this committee as to what systemic issues prevented such time-sensitive information from being made available to those left vulnerable,\u201d Republican Jerry Moran said.<\/p>\n
Democratic Senator Richard Blumenthal said Uber\u2019s management of the hack was \u201cmorally wrong and legally reprehensible,\u201d and that the company appeared to violate state rules for data breach disclosure.<\/p>\n","protected":false},"excerpt":{"rendered":"
Washington, The two people who hacked ride-hailing firm Uber\u2019s data in 2016 were in Canada and Florida at the time, a company security executive told a US congressional committee on Tuesday. About 25 million people whose data was compromised in the breach live in the United States, Uber Technologies Inc chief information security officer John […]<\/p>\n","protected":false},"author":1,"featured_media":21210,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[87],"tags":[],"class_list":["post-21209","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-world"],"_links":{"self":[{"href":"https:\/\/blastingskyhawk.com\/english\/wp-json\/wp\/v2\/posts\/21209","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blastingskyhawk.com\/english\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blastingskyhawk.com\/english\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blastingskyhawk.com\/english\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blastingskyhawk.com\/english\/wp-json\/wp\/v2\/comments?post=21209"}],"version-history":[{"count":1,"href":"https:\/\/blastingskyhawk.com\/english\/wp-json\/wp\/v2\/posts\/21209\/revisions"}],"predecessor-version":[{"id":21211,"href":"https:\/\/blastingskyhawk.com\/english\/wp-json\/wp\/v2\/posts\/21209\/revisions\/21211"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blastingskyhawk.com\/english\/wp-json\/wp\/v2\/media\/21210"}],"wp:attachment":[{"href":"https:\/\/blastingskyhawk.com\/english\/wp-json\/wp\/v2\/media?parent=21209"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blastingskyhawk.com\/english\/wp-json\/wp\/v2\/categories?post=21209"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blastingskyhawk.com\/english\/wp-json\/wp\/v2\/tags?post=21209"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}