← Uber

100k+ user records on AWS — engineer shared code on GitHub

2014 100.0K records affected Share on X

Data compromised

Names, Social Security numbers, Driver's license numbers, Bank account details, Credentials

Technical writeup

Hacker accessed AWS server after Uber engineer shared code on GitHub; admin privileges. Accessed file with 100k names/driver's licenses, 215 bank account/routing, 84 SSNs.

Root cause

Credentials in GitHub; plaintext data on AWS.

References