Uber (3)

MQT on 2017-12-14
Session date: 
December 14, 2017
Question By: 
David Kurten
Asked Of: 
The Mayor


I was concerned to learn on 22 November 2017 that Uber had concealed a massive global breach of the personal information of 57 million customers and drivers in October 2016, failing to notify the individuals and regulators. Uber clearly have many questions to answer with regard to the failure to hold customers' and drivers' personal information securely, as well as a failure to report the breach to the relevant regulatory authorities and notify those affected. What assessment has TfL made of the extent to which customers and Uber drivers in London have been affected by the data breach, including exactly what personal information has been hacked and what has then happened to this information?


Answer for Uber (3)

Answer for Uber (3)

Answered By: 
The Mayor

I have expressed my shock and outrage at this data breach. It will have alarmed millions of Londoners whose personal data could have been stolen by criminals. Uber needs to urgently confirm which of its customers are affected, what is being done to ensure these customers do not suffer adversely, and what action is being taken to prevent this happening again in the future. The public will want to know how such a catastrophic breach of personal data security came about and why Uber failed to report it to the relevant authorities.

I am reassured that the matter is the subject of investigations by the National Crime Agency and the Information Commissioner's Office.