Uber Breach Leads to Class-Action Lawsuit
March 16, 2015
A class action lawsuit has been filed on behalf of the 50,000 Uber drivers whose personally identifiable information was stolen in a breach of Uber’s network. The breach, which was reported two weeks ago , occurred nearly a year ago and had become known to company leadership in September 2014. The suit, filed in federal court in San Francisco on Thursday, claims the delay before notifying drivers was too long and that Uber did not do enough to safeguard the information in violation of California state law.
According to the lawsuit, filed on behalf of a Portland, Ore.-based driver named Sasha Antman, Uber “could have prevented this data breach. It appears that Defendant maintained the Private Information in unencrypted form, and that the Hacker was able to access it freely with a basic password.”