6 ms·
Yep. About that time my Uber account was 'hacked' and someone kept requesting rides in Florida and I had to cancel them as fast as they made them. I emailed U
by madamelic 9y ago
Yep.
About that time my Uber account was 'hacked' and someone kept requesting rides in Florida and I had to cancel them as fast as they made them.
I emailed Uber support and they got back to my 3 days later.
Then someone proceeded to try to gain access to every account I had with that email and password (yeah, yeah, I know). The next worse was someone getting into my DigitalOcean account and launching an instance.
It has finally settled down, I occasionally get alerts from people trying to break into something but lots of 2FA and no shared passwords anymore.
I am not sure if this was Uber's fault or another site's but the timeframe of Oct 2016 lines up.
- asabjorn 9y agoIn the disclosure it says that the attack included names, email addresses and phone numbers. It did not contain any passwords or social security numbers, so your passwords must have been compromised in some other way.
- shallot_router 9y agoIt's not related to this particular breach, but given this and Uber's other issues, it's not out of the realm of possibility that at some point they had a more serious breach involving loss of password hashes or interception of credentials at login. (But in all likelihood the poster's account was just compromised through the usual means, otherwise there would be more reports of hacked accounts.)
- asabjorn 9y agoThe article states that this disclosure came out of an board commissioned investigation into the activities of Sullivan’s security team. Do you think that other more serious breaches discovered by this investigation is hidden, or is this more of a general sentiment around how you perceive Uber?
- kenbaylor 9y agoOh there's more. Much more.
- asabjorn 9y agoI don’t think these kind of comments adds much to the discourse, and we on HN try to not comment when we don’t have anything to add. Do you have any evidence that the action here by the new leadership to disclose all breaches was disingenuous?
- deleted 9y ago[deleted]
- nikcub 9y agoUber accounts are frequently sold on underground markets - they're sourced via endpoint malware and shared passwords You should check over all of your accounts and machines - I doubt it has anything to do with this leak
- aryamaan 9y agocheck your email on https://haveibeenpwned.com https://haveibeenpwned.com