← Blog

Data Breaches List of Uber

Sun Jun 14

Share on X

Looking for a complete Uber data breaches list? This page answers common searches like "Uber hacked," "Uber breach history," and "list of Uber data breaches" with a verified timeline, record counts, root causes, and step-by-step guidance if you may have been affected.

Uber data breach history: Uber’s infamous 2016 cover-up of 57 million users remains a case study in breach ethics and regulator fallout. BreachHistory indexes 16 verified or attested incidents tied to Uber, spanning 2010–2023. This page is a complete, searchable timeline—not a single event—linking every catalog row with context on scale, root cause, and what users should do when a new Uber notice drops.

Why Uber stays on breach trackers

Global tech brands combine massive user bases, high-value intellectual property, and complex supply chains. Attackers target Uber for credentials, source code, CRM exports, and employee directories. When you read headlines about "Uber hacked," the incident may be a consumer PII leak, a developer artifact exposure, or a third-party SaaS tenant breach—each with different remediation steps.

Data breaches list — Uber

Below are the major incidents in our catalog, newest first. Record counts use company, regulator, or Have I Been Pwned attestation where available; actor-only marketing shows as "Unverified / not disclosed."

Biggest and most consequential incidents

2017 — Uber: Uber disclosed Tuesday that hackers had stolen 57…

Uber disclosed Tuesday that hackers had stolen 57 million driver and rider accounts and that the company had kept the data breach secret for more than a year after paying a $100,000 ransom.The deal was arranged by the company’s chief security officer and under the watch of the former chief executive, Travis Kalanick, according to several current and former employees who spoke on the condition of anonymity because the details were private.The security officer, Joe Sullivan, has been fired. Mr. Ka Full incident record →

2016 breach revealed — 57M records, $100k paid to hackers

Bloomberg revealed Uber covered up late-2016 breach: two hackers stole 57M customer records; Uber paid $100k to delete data and stay quiet despite ongoing FTC talks. CEO Khosrowshahi disclosed; Sullivan resigned. Full incident record →

Uber pays hackers $100k after 57M record breach

Two hackers emailed CSO Sullivan after exploiting vulnerability and looting 57M users' data. Sullivan paid $100k; Uber did not disclose to FTC. Treated as 'bug bounty'; Glover and Mereacre later pleaded guilty. Full incident record →

2016 Uber — 57M users (disclosed 2017)

Breach October 2016; Uber paid hackers $100K to delete data and conceal. Disclosed November 2017. $148M settlement. Full incident record →

By the numbers (catalog snapshot)

  • 16 incidents indexed under Uber on BreachHistory
  • 285.3M+ combined attested records across rows with disclosed numerators (many incidents overlap or count emails—not unique people)
  • 2017 — year of the largest attested row in our catalog

Patterns in Uber's breach history

  • Credential and session theft — Phishing, stuffing, and OAuth token abuse recur across tech platforms.
  • Cloud misconfiguration — S3 buckets, misconfigured APIs, and file shares expose data without a traditional "hack."
  • Extortion without precise counts — Ransomware and leak-site actors often publish before victims confirm scope.
  • Supply-chain spillover — npm, SDK, and CRM tenant breaches affect Uber customers even when corporate HQ databases stay intact.

What to do if you used Uber

  1. Enable multi-factor authentication on every Uber account and linked SSO identity.
  2. Check Have I Been Pwned when new Uber headlines appear.
  3. Rotate passwords that were reused on email, banking, or work SSO.
  4. Watch for phishing that cites real breach details (order numbers, usernames) to appear legitimate.
  5. Follow official Uber security communications—not SMS links from unknown numbers.

Related searches

FAQ

How many data breaches has Uber had?

BreachHistory indexes 16 verified or attested Uber data breaches spanning 2010–2023. Counts vary when researchers merge scraping, misconfiguration, and ransomware as separate events.

What is the biggest Uber data breach?

The largest attested incident in our catalog is 57M+ records (Uber: Uber disclosed Tuesday that hackers had stolen 57…). See the full timeline for sources and remediation details.

Has Uber been hacked?

Yes — Uber appears on breach trackers with 16 indexed incidents including Uber: Uber disclosed Tuesday that hackers had stolen 57…. This page links every catalog row with primary sources and what users should do if affected.

Does Uber send data breach notifications?

Regulated markets require consumer notices for many PII events. Not every source-code or scraping story triggers email alerts—read each incident row for notification status.

Explore every Uber incident on BreachHistory

Browse the full catalog: Uber breach records

Compiled from BreachHistory data/breaches.json and primary sources linked on each incident page. Updated 2026-06-15.