Uber says 2.7m Brits hit by breach that was covered up

"This is an approximation rather than an accurate and definitive count because sometimes the information we get through the app or our website that we use to assign a country code is not the same as the country where a person actually lives". It involved names, mobile-phone numbers and email addresses, the ride-hailing firm told the UK's Information Commissioner's Office (ICO).

The firm has said it has a total of five million active users and 50,000 drivers in the UK.

In the hack, 57 million Uber customers and drivers' details were compromised.

"We are committed to changing the way we do business, putting integrity at the core of every decision we make and working hard to regain the trust of consumers", said Nathan Hambley, an Uber spokesman.

The company made the admission to the information Commissioner's Office (ICO) which is investigating the incident, which affected 58 million users and drivers and was kept secret until last week.

White House condemns Pakistan's release of militant suspect
Swati Ajay Gavande, the widow of a slain police officer, said Hafiz Saeed should never have been released from house arrest. Elements of the armed forces have historically fostered ties with insurgents targeting neighbouring Afghanistan and India.

In ICO's report, the regulator said: "Uber has confirmed its data breach in October 2016 affected approximately 2.7million user accounts in the UK". People should continue to be vigilant and follow the advice from the NCSC. "Nevertheless, the nature of the information now acknowledged to have been compromised, together with the allegation that the company concealed the breach without notifying affected drivers and consumers, and prior privacy concerns at Uber, makes this a serious incident that merits further scrutiny".

"We'll be working with the NCSC plus other relevant authorities in the United Kingdom and overseas to determine the scale of the breach, how it has affected people in the United Kingdom and what steps need to be taken by the firm to ensure it fully complies with its data protection obligations".

"Uber's conduct has been truly stunning".

Although several class actions have already been filed against Uber-as well as at least one suit filed by a municipality-the Washington enforcement action marks a new type of liability Uber will face in connection with the 2016 breach.

That revelation prompted a delay in a high-profile trial over whether Uber stole self-driving auto technology from Waymo, a Google spinoff.

  • Megan Austin