The US website Motherboard reported two months ago that "thousands" of Uber account details were available to buy for as little as $1 each on the anonymous "dark web".
From an article at motherboard.vice.com:
A username and password is all you need to access a user’s trip history, which may include personal details such as a home address. While full credit card information is not exposed, the last four digits and expiration date of the user’s card are viewable in a user’s account.
Over on AlphaBay market, a recently launched dark web site, vendor Courvoisier has a listing for 'x1 UBER ACCOUNT - WORLDWIDE TAXI!’ For the meager sum of $1, anyone can anonymously purchase an Uber username and password.
Another vendor, ThinkingForward, has a similar offer, but for $5. “I will guarantee that they are valid and live ONLY. Discounts on bulk purchases,” ThinkingForward writes on his product listing.
Further information, including a couple of first-person accounts, are in an article at the BBC.
I know that Uber is not the only service suffering from data breaches, but given that Uber has thus far denied any breach or compromised accounts, this is yet another example of what I see as their questionable business practices.
(Score: 2) by Gaaark on Saturday May 30 2015, @12:09PM
And it's messing with the universe, all this dark matter, dark energy and dark net.... shame really. Gotta always mess wit' da shit.
This is why we can never have nice things.
--- Please remind me if I haven't been civil to you: I'm channeling MDC. ---Gaaark 2.0 ---