Violation Tracker Individual Record

Company: 
Uber Technologies
Current Parent Company: 
Uber Technologies
Penalty: 
$148,000,000
Year: 
2018
Date: 
September 26, 2018
Offense Group: 
consumer-protection-related offenses
Primary Offense: 
consumer protection violation
Secondary Offense: 
privacy violation
Violation Description: 

Uber Technologies agreed to pay $148 million to settle multistate litigation that it violated data breach reporting and reasonable data security laws in connection with a 2016 breach of driver and customer data. Uber was accused of exposing 57 million users' data and paying hackers to cover up the breach rather than reporting it to proper authorities.

Level of Government: 
state
Action Type: 
agency action
Agency: 
Multistate Attorneys General Case
Civil or Criminal Case: 
civil
HQ Country of Parent: 
USA
HQ State of Parent: 
California
Ownership Structure of Parent: 
publicly traded
Major Industry of Parent: 
miscellaneous services
Specific Industry of Parent: 
transportation services
Link to Archived Court Document: 
Source Notes: 
If an online information source is not working, check the Violation Tracker Data Sources page for an updated link.
Parent company note: 
Parent-subsidiary relationship is current as of the most recent revision listed in the Update Log.