AP

Hacker claims to breach Uber, security researcher says

Sep 15, 2022, 8:17 PM | Updated: 9:27 pm

Uber said Thursday that it reached out to law enforcement after a hacker apparently breached its network. A security engineer said the intruder had provided evidence of obtaining access to crucial cloud systems at the ride-hailing service.

There was no indication that Uber’s fleet of vehicles or its operation was in any way affected.

“It seems like they’ve compromised a lot of stuff,” said Sam Curry, an engineer with Yuga Labs who communicated with the hacker. That includes obtaining complete access to the Amazon and Google-hosted cloud environments where Uber stores its source code and customer data, he said.

Curry said he spoke to several Uber employees who said they were “working to lock down everything internally” to restrict the hacker’s access. That included the company’s Slack internal messaging network, he said.

He said there was no indication that the hacker had done any damage or was interested in anything more than publicity. “My gut feeling is that it seems like they are out to get as much attention as possible.”

The hacker had alerted Curry and other security researchers to the intrusion by using and an internal Uber account to comment on vulnerabilities they had previously identified on the company’s network through its bug-bounty program, which pays ethical hackers to identify vulnerabilities.

The hacker provided a Telegram account address and Curry and other researchers then engaged them in a separate conversation, sharing screenshots of various pages from Uber’s cloud providers to prove they broke in.

The Associated Press attempted to contact the hacker at the Telegram account where Curry and the other researchers chatted with them. But no one responded.

One screenshot posted on Twitter and confirmed by researchers shows a chat with the hacker in which they say they obtained the credentials of an administrative user and then used social engineering to access Uber’s internal network.

Uber said via email that it was “currently responding to a cybersecurity incident. We are in touch with law enforcement.” It said it would provide updates on its Uber Comms twitter feed.

Copyright © The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

AP

This photo provided by Randy Shannon shows Mooney Falls on the Havasupai reservation outside the vi...

Associated Press

Dozens report illness after trips to waterfalls near Grand Canyon

Dozens of hikers say they fell ill during trips to a popular Arizona tourist destination that features towering blue-green waterfalls deep in a gorge neighboring Grand Canyon National Park.

15 hours ago

Mugshot of Rudy Giuliani, who was processed Monday, June 10, 2024, in the Arizona fake electors cas...

Associated Press

Rudy Giuliani posts $10K cash bond after being processed in Arizona fake electors case

Rudy Giuliani, a former New York City mayor and Donald Trump attorney, was processed Monday in the Arizona fake electors case.

3 days ago

FILE - White House former chief of staff Mark Meadows speaks with reporters at the White House, Wed...

Associated Press

Former Trump chief of staff Mark Meadows pleads not guilty in Arizona fake elector case

Former Donald Trump presidential chief of staff Mark Meadows and Trump 2020 Election Day operations director Michael Roman pleaded not guilty Friday in Phoenix to nine felony charges for their roles in an effort to overturn Trump's Arizona election loss to Joe Biden.

7 days ago

deadly heat wave last summer...

Associated Press

After a deadly heat wave last summer, metro Phoenix is changing tactics

Fresh memories of the deadly heat wave last summer have led Arizona authorities to launch new tactics ahead of summer 2024.

17 days ago

A Yuma man has been arrested for allegedly starting a wildfire in a national wildlife preserve near...

Associated Press

Man accused of starting wildfire in national wildlife preserve in Yuma

A Yuma man has been arrested for allegedly starting a wildfire in a national wildlife preserve near the California border.

18 days ago

Colorado River settlement center of new Navajo Nation push...

Associated Press

Tribes say their future is at stake as they push for Congress to consider Colorado River settlement

Navajo officials are celebrating the signing of legislation outlining a proposed Colorado River settlement that would ensure water rights.

21 days ago

Sponsored Articles

...

Condor Airlines

Condor Airlines can get you smoothly from Phoenix to Frankfurt on new A330-900neo airplane

Adventure Awaits! And there's no better way to experience the vacation of your dreams than traveling with Condor Airlines.

...

COLLINS COMFORT MASTERS

Here are 5 things Arizona residents need to know about their HVAC system

It's warming back up in the Valley, which means it's time to think about your air conditioning system's preparedness for summer.

...

Midwestern University

Midwestern University Clinics: transforming health care in the valley

Midwestern University, long a fixture of comprehensive health care education in the West Valley, is also a recognized leader in community health care.

Hacker claims to breach Uber, security researcher says