The legal woes continue to stack up for Uber.
Following a data breach disclosed in February compromising the personal information of about 50,000 drivers, a class action lawsuit was filed in federal court in San Francisco.
Filed under the name of Sasha Antman, an Uber driver in Portland, Oregon, it claims the company did not do enough to safeguard private data of its drivers and waited too long — about five months — to disclose the breach.
Uber said it was hacked by unauthorized third party last year, gaining access to the names and license numbers of a “small percentage” of Uber drivers.
The complaint said hackers were able to get access to the Uber database using a ‘security key’ publicly available on GitHub, a coding website.
“In other words, the defendant not only permitted all of the compromised private information to be accessible via a single password, but allowed that password to be publicly accessible via the Internet,” it said.
The Antman lawsuit alleges an unknown person used his private information to apply for a credit card which is now recorded on his credit report.
