5 ms·
Careem has identified an incident involving unauthorised access to customer data
- GrumpyNl 8y agoNothing to see here, its a minor breach.
- ckastner 8y agoTrip data can contain extremely sensitive information.
- hyder_m29 8y agoThey are also unsure whether passwords or credit card details were stolen.
- abdullahdiaa 8y agoI don't think Customers’ name, email address, phone number and trip data can be considered a minor breach
- amingilani 8y agoWell now. What customer account data was stolen? Customers’ name, email address, phone number and trip data.
- pcx 8y agoIt is ingenuine on their part to not report how detailed the trip data they have is. Trip data could easily show Users' home/office locations, their daily travel patterns, their kid's daycare and whatnot. This kind of knowledge can be extremely dangerous if it falls into the wrong hands. Careem should be more straightforward about this and explain the consequences, rather than slyly gloss over the most dangerous part of the breach by mentioning only two effing words about it.
- netsharc 8y agoThey also have only said when they figured out the breach, but not when the breach was. It could have happened a day before January 14th, or 3 months before January 14th. The difference is how much trust I would give them. Interestingly they said the breach was done by "online criminals". Do they know, or do they automatically assume that people illegally accessing systems are criminals?
- i_cant_speel 8y ago> Do they know, or do they automatically assume that people illegally accessing systems are criminals? I'm not sure what distinction you are trying to make here. The fact that they are doing something illegal makes them criminals.
- na85 8y ago>The fact that they are doing something illegal makes them criminals. Not in all countries. In Canada at least, plenty of things are against the law (illegal) but do not constitute a criminal offence. I'm not committing a crime when I break the speed limit almost every day on my way to work, but what I'm doing is still illegal.
- thisacctforreal 8y agoPoor example, just a week ago a 19-year-old had his family's house raided for him scraping documents from a public gov't website. https://evandentremont.com/some-information-on-the-freedom-of-information-hack/ https://evandentremont.com/some-information-on-the-freedom-o...
- nkrisc 8y agoMy hunch is the distinction they're trying to make is between criminals who steal data for nothing more than monetary gain versus those who would steal such data for more nefarious reasons, perhaps on behalf of a nation.
- deleted 8y ago
- ScalaForever 8y agoWonderful, hacking often means dumping one data store due to sec problem with it (think 90s-SQL-injection). I assume trip data was stored in the same system as emails - so both got hacked. Minor security considerations would put those in different systems and not store together.
- techwizrd 8y agoWhy is Uber included in the title here? It makes it seem like Uber was involved. I think the title should mention, at most, the Careem is a Middle Eastern ridesharing company.
- thesimon 8y agoRidesharing could also include long-distance ride-sharing like BlaBlaCar. Since Uber-for-X has become a thing, I don't think including Uber in the title is a bad thing.
- thisisit 8y agoI know it's difficult to find an appropriate title but wouldn't - "Careem, ridesharing company/app in the Middle East" work better than calling out Uber?
- stevekemp 8y agoThe compromise was identified on January 14th, and the announcement took three months? That's a pretty appalling timeline.
- tzahola 8y agoCmd+F "seriously" "We take the protection of our customers and captains’ data very seriously."
- nuclearcookie 8y agoExactly what I did when I opened the page.
- thawab 8y agoa friend ,who had a job interview with careem, told me i should use a different mobile number and name if I'm using their service. Glad i followed his advice.
- deleted 8y ago[deleted]
- __bee 8y agoFunny part! I wanted to delete my Careem account. I could not do that. I cannot delete my account. https://help.careem.com/hc/en-us/articles/115008681747-How-do-I-delete-an-account- https://help.careem.com/hc/en-us/articles/115008681747-How-d...
- reallymental 8y ago"A Careem account cannot be deleted as every account detail can only be used once." - uh what? So they've hashed your account details. They won't delete this. Great
- thrillgore 8y ago>January 14 Thanks for not telling anyone sooner.