People search Uber data breach timeline because the brand sits on billions of accounts, credentials, and cloud workloads. BreachHistory indexes 18 Uber-linked incidents, with headline counts up to 57M+ in catalog rows. This page maps every attested event through 2026 with internal links to canonical records.
Why Uber breach history matters
Uber operates in Transportation (United States). Across indexed rows, recurring themes include ransomware and extortion, credential theft and social engineering, cloud and database misconfiguration, third-party and supply-chain exposure, zero-day exploitation and malware. Understanding the chronological pattern helps security teams, customers, and regulators separate confirmed disclosures from forum marketing.
Full timeline through 2026
2023 — Genova Burns law firm breach — driver SSN/TIN stolen
Cataloged incident. Uber's law firm Genova Burns informed drivers that sensitive data including SSN and Tax ID numbers had been stolen in a data breach. Number of affected drivers not disclosed. Exposed categories include Social Security numbers. No attested victim count is published for this row yet. See the tub2304 and canonical BreachHistory entry.
2022 — Teqtivity vendor breach — 77k employee data, internal reports
Cataloged incident. Data on 77,000 Uber employees plus internal reports (and possibly source code) surfaced on Breached forums from Teqtivity compromise. Uber said unrelated to Sept 2022 breach; no customer data. Exposed categories include Source code, Employee data, Internal documents. BreachHistory cites approximately 77K+ affected records in this row. See the tub2212 and canonical BreachHistory entry.
2022 — Lapsus$-affiliated hacker — full compromise (Slack, source, DBs)
Cataloged incident. Hacker 'teapotuberhacker' announced breach in Uber Slack; source code, internal DBs, comms compromised. Social engineering—MFA bypass by spamming employee. Uber found no evidence of trip history access. Exposed categories include Source code, Employee data, Internal documents. No attested victim count is published for this row yet. See the tub2209 and canonical BreachHistory entry.
2022 — — Internal systems
Cataloged incident. Hacked. Internal systems. Exposed categories include Names, emails, addresses, and other PII. No attested victim count is published for this row yet. See the uber-20222022 and canonical BreachHistory entry.
2020 — Uber Eats user data on dark web (579 customers, 100 drivers)
Cataloged incident. Cyble found personal info on Uber Eats customers and drivers on dark web—~579 customer files, 100 drivers. Exposed categories include Personal info of Uber Eats customers and drivers (names, addresses, contact details). BreachHistory cites approximately 679 affected records in this row. See the tub2008 and canonical BreachHistory entry.
2018 — — Uber: Information on this security breach is provided by…
Cataloged incident. Information on this security breach is provided by the Office of the Indiana Attorney General Exposed categories include Personal information. BreachHistory cites approximately 197 affected records in this row. See the uber2018 and canonical BreachHistory entry.
2018 — FTC $148M settlement for concealing 2016 breach
Cataloged incident. Uber settled with FTC over 2014 and 2016 breaches; concealed 2016 breach during FTC investigation. $148M penalties; required privacy program and biennial assessments. Exposed categories include Details not publicly disclosed. No attested victim count is published for this row yet. See the tub1809 and canonical BreachHistory entry.
2017 — — Uber: Uber disclosed Tuesday that hackers had stolen 57…
Cataloged incident. Uber disclosed Tuesday that hackers had stolen 57 million driver and rider accounts and that the company had kept the data breach secret for more than a year after paying a $100,000 ransom.The deal was arranged by the company’s chief security officer and under the watch of the former chief executive, Travis Kalanick, according to several current and former employees who spoke on the condition of anonymity because the details were private.The security officer, Joe Sullivan, has been fired. Mr. Ka Exposed categories include Personal information. BreachHistory cites approximately 57M+ affected records in this row. See the uber2017 and canonical BreachHistory entry.
2017 — 57M records, $100k paid to hackers
Cataloged incident. Bloomberg revealed Uber covered up late-2016 breach: two hackers stole 57M customer records; Uber paid $100k to delete data and stay quiet despite ongoing FTC talks. CEO Khosrowshahi disclosed; Sullivan resigned. Exposed categories include Details not publicly disclosed. BreachHistory cites approximately 57M+ affected records in this row. See the tub1711 and canonical BreachHistory entry.
2016 — Uber pays hackers $100k after 57M record breach
Cataloged incident. Two hackers emailed CSO Sullivan after exploiting vulnerability and looting 57M users' data. Sullivan paid $100k; Uber did not disclose to FTC. Treated as 'bug bounty'; Glover and Mereacre later pleaded guilty. Exposed categories include Email addresses, Payment information. BreachHistory cites approximately 57M+ affected records in this row. See the tub1612 and canonical BreachHistory entry.
2016 — 57M users (disclosed 2017)
Cataloged incident. Breach October 2016; Uber paid hackers $100K to delete data and conceal. Disclosed November 2017. $148M settlement. Exposed categories include Names, email addresses, phone numbers, driver's license numbers. BreachHistory cites approximately 57M+ affected records in this row. See the uber2016 and canonical BreachHistory entry.
2015 — — Uber: Uber notified 50,000 drivers of an unauthorized…
Cataloged incident. Uber notified 50,000 drivers of an unauthorized access to their database which resulted in compromising driver data. The hacking took place in May of 2014. According to the company only names and driver's license numbers were compromised. The company is offering identity protection services for affected drivers. More Information: http://www.bloomberg.com/news/articles/2015-02-27/uber-discloses-databas... Exposed categories include Personal information. BreachHistory cites approximately 50K+ affected records in this row. See the uber2015 and canonical BreachHistory entry.
2015 — — Uber: Occured Sep 2014, 50K records
Cataloged incident. Occured Sep 2014. Revealed Feb 2015. Names & license plates of 50,000 driver partners. BreachHistory cites approximately 50K+ affected records in this row. See the uberu and canonical BreachHistory entry.
2014 — God View used to track BuzzFeed journalist
Cataloged incident. Executive Josh Mohrer used 'God View' to track BuzzFeed reporter. God View widely accessible to employees. NY AG fined Uber $20k (Jan 2016). Exposed categories include Employee data. No attested victim count is published for this row yet. See the tub1411 and canonical BreachHistory entry.
2014 — 100k+ user records on AWS — engineer shared code on GitHub
Cataloged incident. Hacker accessed AWS server after Uber engineer shared code on GitHub; admin privileges. Accessed file with 100k names/driver's licenses, 215 bank account/routing, 84 SSNs. Exposed categories include Names, Social Security numbers, Driver's license numbers, Bank account details, Credentials. BreachHistory cites approximately 100K+ affected records in this row. See the tub1405 and canonical BreachHistory entry.
2014 — — Uber: Poor security / misconfiguration, 50,000 records
Cataloged incident. Data breach reported. tech organization. Method: poor security. Source: Wikipedia List of data breaches. Exposed categories include Personal and demographic data. BreachHistory cites approximately 50K+ affected records in this row. See the uber2014-50000-wiki2 and canonical BreachHistory entry.
2011 — God View shown at Chicago launch — user locations
Cataloged incident. At 2011 Chicago launch, Uber displayed specific user locations to guests. First known God View incident; tool widely available to employees through 2017. Exposed categories include Employee data, Internal documents. No attested victim count is published for this row yet. See the tub1109 and canonical BreachHistory entry.
2010 — — Uber: Uber paid the hackers $100,000 to delete the stolen…
Cataloged incident. Uber paid the hackers $100,000 to delete the stolen data. Chief security officer Joe Sullivan has resigned. BreachHistory cites approximately 57M+ affected records in this row. See the uberu1 and canonical BreachHistory entry.
Patterns and analysis
- Ransomware and extortion — appears across multiple Uber catalog entries; prioritize controls that address this class of failure.
- Credential theft and social engineering — appears across multiple Uber catalog entries; prioritize controls that address this class of failure.
- Cloud and database misconfiguration — appears across multiple Uber catalog entries; prioritize controls that address this class of failure.
- Third-party and supply-chain exposure — appears across multiple Uber catalog entries; prioritize controls that address this class of failure.
- Zero-day exploitation and malware — appears across multiple Uber catalog entries; prioritize controls that address this class of failure.
- Record-count hygiene — BreachHistory indexes actor-cited figures separately from company-confirmed totals; read each row's technicalWriteup before treating counts as fact.
- 2026 monitoring — New disclosures roll into this timeline as they are verified or labeled unverified per catalog policy.
What to do if you may be affected
- Step 1: Enable phishing-resistant MFA on every account tied to this brand.
- Step 2: Use unique passwords and a password manager—breach rows often involve credential reuse.
- Step 3: Monitor official company breach notices and regulator filings, not dark-web downloads.
- Step 4: Bookmark the Uber company page for new 2026+ disclosures.
Canonical BreachHistory hub
Explore every indexed row: breachhistory.com/uber · Latest: tub2304.
Sources: BreachHistory catalog (18 rows for Uber), company and regulator disclosures cited in individual breach records.