Analyzing the Uber Data Breach: Legal and Security Implications

This case study analyzes the Uber data breach, which exposed the personal information of over 57 million drivers and riders. The breach involved the theft of sensitive data, including names, driver's license information, phone numbers, and email addresses. Uber concealed the breach for over a year and paid hackers to delete the stolen data. The case resulted in multiple lawsuits, including Alejandro Flores v. Raiser and Danyelle Townsend and Ken Tew v., alleging gross negligence and failure to maintain adequate security safeguards. Uber eventually settled for $148 million and agreed to implement changes to prevent future breaches, including enhanced data security programs and incident reporting. The case highlights the significant legal and financial consequences of data breaches and the importance of robust cybersecurity measures. Despite the settlement, Uber continues to face some ongoing lawsuits related to the breach.

Data Breach Case Abstract
Organization Name: Uber
The nature of the breach:
The hackers get access to the personal information of over 57 million drivers and riders. The
organization concealed the hacking for more than one year. The hackers had stolen the
personal information that includes the license and names of the drivers of over 600000 drivers
in United states of America, the name of the riders, mobile phone numbers and email
addresses.
Lawsuit name, court and case number:
Lawsuit name: Alejandro Flores v. Raiser, Danyelle Townsend and Ken Tew v.
Court name: Federal Court
Case number: 15-cv-01175-LB, 2018 WL 2151231
Primary allegations made by plaintiffs in lawsuit:
The First case, Alejandro Flores v. Raiser that was filled in the Federal Court, described the
conduct of Uber as the grossly negligent as well as added that the organisation have departed
from all of the standard of care that are reasonable. One more lawsuit has been submitted to
the court in the San Francisco. The lawyers who have filled Danyelle Townsend and Ken Tew v.
It was alleged by Uber that the organisation would be having the physical, administrative as
well as the technical safeguards like the procedures of intrusion detection which can detect the
data breaches in one timely manner for protecting and securing the National wide and Plaintiffs
Class members.
Outcome of case (e.g., ruling, settlement, still pending):
One of the major companies such as Uber have faced a high quality threat of the security
breaches than the companies that are small due to the huge amount of the data and
information that they processed. The hackers had stolen the personal information that includes
the license and names of the drivers of over 600000 drivers in United states of America, the
name of the riders, mobile phone numbers and email addresses. Uber has paid 148 million
dollars. They have also paid 1000000 dollars to the hackers for deleting the data as well as for
keeping the breach quiet. It was alleged by Uber that the organisation would be having the
physical, administrative as well as the technical safeguards like the procedures of intrusion
detection which can detect the data breaches in one timely manner for protecting and securing
the National wide and Plaintiffs Class members. The decision of Uber was to Cover up the data
breach. The settlement terms are including the changes to the business practices of the Uber
aimed to prevent data breaches for the future as well as to reforming the corporate culture of

the company. Uber will also have to report any of the incidents that are related to the data
security for the next two years as well as they have to implement an information security
program that is comprehensive in nature, which will be overseen by one executive officer. The
officer will give advices to the board of directors and the executive staffs of Uber. Two of the
top Security Officials were fired at the time the data breach was announced. The organization
still face some lawsuits from the drivers, riders and the cities of the Los Angeles and Chicago
over the data breach.

References:
Huq, N. (2015). Follow the data: Dissecting data breaches and debunking myths. Trend-Micro
Research Paper.
Kim, C. (2016). Granting Standing in Data Breach Cases: The Seventh Circuit Paves the Way
Towards a Solution to the Increasingly Pervasive Data Breach Problem. Colum. Bus. L.
Rev., 544.
Romanosky, S., Hoffman, D., & Acquisti, A. (2014). Empirical analysis of data breach
litigation. Journal of Empirical Legal Studies, 11(1), 74-104.
Wong, J. C. (2017). Uber concealed massive hack that exposed data of 57m users and
drivers. The Guardian, 22.