AP

Hacker claims to breach Uber, security researcher says

Sep 15, 2022, 8:17 PM | Updated: 9:27 pm

Uber said Thursday that it reached out to law enforcement after a hacker apparently breached its network. A security engineer said the intruder had provided evidence of obtaining access to crucial cloud systems at the ride-hailing service.

There was no indication that Uber’s fleet of vehicles or its operation was in any way affected.

“It seems like they’ve compromised a lot of stuff,” said Sam Curry, an engineer with Yuga Labs who communicated with the hacker. That includes obtaining complete access to the Amazon and Google-hosted cloud environments where Uber stores its source code and customer data, he said.

Curry said he spoke to several Uber employees who said they were “working to lock down everything internally” to restrict the hacker’s access. That included the company’s Slack internal messaging network, he said.

He said there was no indication that the hacker had done any damage or was interested in anything more than publicity. “My gut feeling is that it seems like they are out to get as much attention as possible.”

The hacker had alerted Curry and other security researchers to the intrusion by using and an internal Uber account to comment on vulnerabilities they had previously identified on the company’s network through its bug-bounty program, which pays ethical hackers to identify vulnerabilities.

The hacker provided a Telegram account address and Curry and other researchers then engaged them in a separate conversation, sharing screenshots of various pages from Uber’s cloud providers to prove they broke in.

The Associated Press attempted to contact the hacker at the Telegram account where Curry and the other researchers chatted with them. But no one responded.

One screenshot posted on Twitter and confirmed by researchers shows a chat with the hacker in which they say they obtained the credentials of an administrative user and then used social engineering to access Uber’s internal network.

Uber said via email that it was “currently responding to a cybersecurity incident. We are in touch with law enforcement.” It said it would provide updates on its Uber Comms twitter feed.

Copyright © The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

AP

Global technology outage causes chaos on Friday morning...

Associated Press

Faulty software update causes havoc worldwide for airlines, hospitals and governments

A global technology outage grounded flights, knocked banks and hospital systems offline and media outlets off air on Friday morning.

1 day ago

Republican presidential candidate former President Donald Trump arrives during the second day of th...

Associated Press

Donald Trump celebrated by former rivals at Republican National Convention

Former president Donald Trump was celebrated at the Republican National Convention by former rivals, including Nikki Haley and Ron DeSantis.

4 days ago

FILE - Members of the Henderson Fire Department load Deb Billet, 66, into an ambulance before trans...

Associated Press

Things to know about heat deaths as a dangerously hot summer shapes up in the western US

A dangerously hot summer is shaping up in the U.S. West, with heat suspected in dozens of recent deaths.

7 days ago

FILE - Dr. Ruth Westheimer participates in the "Ask Dr. Ruth" panel during the Hulu presentation at...

Associated Press

Dr. Ruth Westheimer, the sex therapist who became a pop icon, has died

Dr. Ruth Westheimer, the sex therapist who became a pop icon, media star and best-selling author, has died.

7 days ago

Biden proposes rule to protect 36 million workers from extreme heat...

Associated Press

Biden proposes new rule to protect 36 million workers from extreme heat

President Joe Biden on Tuesday proposed a new rule to address excessive heat in the workplace, warning — as tens of millions of people in the U.S. are under heat advisories — that high temperatures are the country's leading weather-related killer.

18 days ago

FILE - Rori Chang, of Glendale, Ariz., walks with her dog Ava as they leave the Maricopa Country An...

Associated Press

Here are ways that can help ease dogs’ July Fourth dread

Those with furry, four-legged family members will be searching for solutions to the Fourth of July anxiety that fireworks bring.

19 days ago

Sponsored Articles

...

Collins Comfort Masters

Here’s how to be worry-free when your A/C goes out in the middle of summer

PHOENIX -- As Arizona approaches another hot summer, Phoenix residents are likely to spend more time indoors.

...

Midwestern University

Midwestern University Clinics: transforming health care in the valley

Midwestern University, long a fixture of comprehensive health care education in the West Valley, is also a recognized leader in community health care.

...

DISC Desert Institute for Spine Care

Sciatica pain is treatable but surgery may be required

Sciatica pain is one of the most common ailments a person can face, and if not taken seriously, it could become one of the most harmful.

Hacker claims to breach Uber, security researcher says