US based transportation services company Uber Technologies Inc. is paying USD 148 million to settle legal action over a cyber-attack that exposed data from 57 million (5.7 crore) customers and drivers.
The massive breach occurred in 2016 but Uber sought to hide it from regulators. The company paid the hackers, who were behind the intrusion, USD 100,000 to secure the data grabbed from the company’s cloud servers.
The personal data from 57 million Uber accounts also included information about 6 lakh driving licence numbers.
The payment settles action brought by the US government and 50 states over the company’s failure to disclose details of the data loss.
The company however revealed some information about the breach in November 2017 and admitted that it should have been more open about the attack.