Security Audit

Our Web Application Pentest ( WAP) attempts to address the Owasp top 10 & SANS top 20 web application vulnerabilities and other exploitable loopholes of your web application . Along with it our WAP team also test web applications for Business logic flaws that can directly or indirectly effect the functioning of application.

Trainings

We are here to help you solve your biggest query- where and how to start? CDI has brought various courses in Ethical Hacking in Chandigarh where all you technology lovers will be given the much needed push to move forward and create a niche for yourself in the field. From Beginner to Expert level we have many kinds of training patterns.

India Nigeria Partner With Us Latest Events Articles
91-771045-0011
Call Us : +91-771045-0011
91-771045-0011

UBER in crisis AGAIN! Discloses Data Breach

 Posted By: Ljsingh / Mar 1, 2015 /  Data Breach , Uber , Intrusion

uber data breach

Uber, the san francisco based taxi app startup is in news again for the wrong reasons. The company blog on 27th february reported about a security breach in their database. The third party behind this attack is yet to be identified. The company claims that the breaking took place on 13th May 2014 with a exposure of close to 50,000 accounts which were withholding their contracted driver's names & licence but formed only a small portion of their overall database.

As reported by Katherine Tassi, Uber's Managing Counsel of Data Privacy, Uber has been receiving a lot of flak of late due to issues ranging from security lapses after incidents of rape came to light in various countries with the company charging exorbitant tariff from customers during terrorist attacks in sydney. Serious questions have been raised on it's tax policy around the world.

Details of Uber Data Breach:

  • On September 17, 2014, Uber discovered that one of their databases could potentially have been accessed by a third party.
  • Upon discovery Uber immediately changed the access protocols for the database and began an in-depth investigation.
  • The investigation revealed that a one-time unauthorized access to an Uber database by a third party had occurred on May 13, 2014.
  • Further the investigation determined the unauthorized access impacted approximately 50,000 drivers across multiple states, which is a small percentage of current and former Uber driver partners.
  • The files that were accessed contained only the name and driver's license number of some driver partners.
  • To date, the taxi firm have not received any reports of actual misuse of any information as a result of this incident, but they are notifying impacted drivers and recommend these individuals monitor their credit reports for fraudulent transactions or accounts.

Uber will provide a free one-year membership of Experian's ProtectMyID Alert. If impacted driver partners have questions or need an alternative to enrolling online, please call (877) 297-7780 and provide the Engagement number listed in the notification letter.

Uber have also filed what is referred to as a John Doe lawsuit to gather information that may lead to confirmation of the identity of the third party.

See more of Cyber Intelligence by logging in.
Connect with cyber security experts,Discover job opportunities,Online Training, Information Security Advisory and lot more.