Punishment against Uber
In the course of a cyberattack, the data of about 82 000 Uber drivers were stolen, including movement profiles and driving incidents. In addition, the data was stolen by about 2.7 million customers. The data theft was kept secret by Uber, instead, the company paid the perpetrators 100 000 pounds, if they delete the data.
Decision data:
26.11.2018
Country:
United Kingdom
Type of Issue:
Theft of Data
Number of involved data records:
2 700 000
Special category of data involved:
No
Fine:
€ 440,000,-
Violation of GDPR Paragraph:
31. Cooperation with the supervisory authority
32. Security of processing
33. Notification of a personal data breach to the supervisory authority
5. Principles relating to personal data processing
83. General conditions for imposing administrative fines
Reference: