Uber pays hackers $100k after 57M record breach

2016 57.0M records affected

Data compromised

Email addresses, Payment information

Technical writeup

Two hackers emailed CSO Sullivan after exploiting vulnerability and looting 57M users' data. Sullivan paid $100k; Uber did not disclose to FTC. Treated as 'bug bounty'; Glover and Mereacre later pleaded guilty.

Root cause

Vulnerability; extortion payment; non-disclosure.

References

https://www.uber.com/newsroom/security/