Science

Illinois Sues Uber Over 2016 Data Breach

Illinois Sues Uber Over 2016 Data Breach

The law requires companies to disclose data breaches to affected consumers and the attorney general's office within 45 days.

The lawsuit filed Monday in Cook County Circuit Court contends Uber's failure to protect consumers' personal information violated city and state laws.

Uber says that the 2.7 million figure is an approximation because some users might disclose a different location to the one where they actually live.

"The Board will be calling Uber's attention on the matter of its alleged admission on the breach of data privacy and will conduct its own investigation", LTFRB board member Aileen Lizada said in a text message to reporters on Wednesday.

The State of Washington's Attorney General filed a complaint against Uber Technologies, Inc., (Uber) yesterday related to the 2016 hack that exposed the personal data of 57 million riders and drivers.

Ferguson's lawsuit is the first from a state, although attorneys general in New York, Missouri, Massachusetts, Connecticut and IL have begun investigations, and the city of Chicago and Cook County have filed a lawsuit.

More news: Eight donkeys jailed for eating flowers outside prison
More news: Pope Francis Holds Minute of Silence in Honor of Egypt's Victims
More news: Everton to appoint Sam Allardyce after bowing to his big demands

Under Washington law, the breach of names, phone numbers and addresses does not require notification, Ferguson said, but the driver's license numbers do.

The firm has said it has a total of five million active users and 50,000 drivers in the UK. Uber failed to notify the attorney general's office until the 21st of November which was more than year after the initial breach happened, which was a result of Uber paying hush money to the hackers to destroy the data. "There is no excuse for keeping this information from consumers". Uber waited more than a year, Ferguson said.

Representatives of the authorities met in Brussels today to go over information Uber provided since the breach became public.

"Uber users should continue to be vigilant and follow the advice from the NCSC, which can be found on its website".

"We have seen no evidence of fraud or misuse tied to the incident", Uber said in a statement.

A joint lawsuit was filed on behalf of IL and the city of Chicago on Monday, seeking to hold the ride sharing company accountable for a 2016 breach that exposed the data of 57 million customers and drivers worldwide.