The ride-hailing company Uber broke Pennsylvania law when it failed to notify potential victims, including thousands of drivers, for a year after it discovered hackers had stolen their personal information, said the state attorney general, who sued the company Monday.
The lawsuit, filed in Philadelphia, said hackers stole the names and driver’s license numbers of at least 13,500 Pennsylvania Uber drivers. It accused Uber of violating a state law requiring it to notify victims of a data breach within a “reasonable” time frame.
Join Us On LinkedIn
Join the Cybersecurity and Incident Response Group on LinkedIn