Uber Slammed in Class Action Lawsuit Over Concealment of October 2016 Data Breach

New to ClassAction.org? Read our Newswire Disclaimer

Uber Technologies Inc. finds itself as the defendant in yet another proposed class action lawsuit. The latest case, filed in Pennsylvania, aims to hold the ride-hailing platform and co-defendants Rasier, LLC and Rasier-CA, LLC responsible for the handling of a previously undisclosed October 2016 data breach for which Uber paid the perpetrators of the hack $100,000 to dispose of any evidence that driver and rider data was stolen. From the lawsuit:

“According to [the defendants’] press releases, two hackers gained access to information stored on GitHub, a service that allows engineers to collaborate on developing software code. There, the hackers were able to steal [the defendants’] credentials for a separate cloud services provider. From there, the hackers were able to download driver and rider data.” 

The 26-page complaint slams Uber for not only waiting more than a year to disclose the data breach, but also the “deliberate action” the company took to conceal the incident, all while it was negotiating with the Federal Trade Commission (FTC) on how to properly handle consumer data.

The lawsuit cites potential violations of consumer protection statutes in all 50 states and the District of Columbia.