Uber has suffered a data breach yet again in which employee email addresses, IT asset information, and corporate documents were released online. The data was stolen from a third-party vendor and leaked by a hacker known as “UberLeaks” on a forum that is known for publishing data breaches.
The leaked data includes several files believed to be related to the source code of mobile device management platforms used by Uber and Uber Eats, as well as third-party vendor services.
The data was separated into topics relating to Uber MDM, Uber Eats MDM, and the third-party Teqtivity MDM platform. Uber confirmed that its data was stolen in a breach on Teqtivity, a third-party company that provides asset management and tracking services for the company. Teqtivity also acknowledged the cybersecurity incident, stating that unauthorized access to their systems by a malicious third party had led to customer data being compromised.
The exposed data included device information such as serial number, make, model, and technical specifications, as well as user data such as first and last name, work email address, and work location details. An investigation is ongoing and a third-party forensics firm has been hired to assist.
Security researchers have noted that the leaked data contains enough information to potentially target Uber employees with phishing attacks.
According to posts on a hacking forum, the Lapsus$ group is believed to be behind several high-profile attacks although Uber has denied any involvement by the group in the data breach and claims that there has been no evidence of malicious access to its systems.
The Lapsus$ group is believed to be involved in several cyberattacks on high-profile companies including a September 2022 incident in which the alleged cybercriminals accessed Uber’s internal network and Slack server
