ATTORNEY GENERAL PETERSON REACHES $148 MILLION SETTLEMENT WITH UBER OVER DATA BREACH
Attorney General Peterson announced that he, along with the other 49 states and the District of Columbia, has reached an agreement with California-based ride-sharing company Uber Technologies, Inc. (Uber) to address the company’s one-year delay in reporting a data breach to its affected drivers.
Uber learned in November 2016 that hackers had gained access to some personal information that Uber maintains about its drivers, including drivers’ license information pertaining to approximately 600,000 drivers nationwide. Uber tracked down the hackers and obtained assurances that the hackers deleted the information. However, even though some of that information, namely drivers’ license numbers for Uber drivers, triggered Nebraska law requiring them to notify affected Nebraska residents, Uber failed to report the breach in a timely manner, waiting until November 2017 to report it.
Attorney General Peterson said, “For data breaches affecting Nebraska residents, notification by the business whose systems have been breached must be made to the Attorney General and affected Nebraskans as soon as possible and without unreasonable delay. Today’s announcement illustrates that the repercussions for failing to do so will be both swift and severe.”
As part of the nationwide settlement, Uber has agreed to pay $148 million to the states. Nebraska will receive nearly $700,000.00. In addition, Uber has agreed to strengthen its corporate governance and data security practices to help prevent a similar occurrence in the future.
The settlement between Nebraska and Uber requires the company to:
All 50 states and the District of Columbia are participating in this multistate agreement with Uber.
To obtain information about how to protect yourself as a consumer, file a consumer complaint, or report a scam, please visit the Nebraska Attorney General’s Office, Consumer Protection Division website at www.protectthegoodlife.nebraska.gov or call (800) 727-6432.