I've been Ubered - have you?

Janesy B

Janesy B

Janesy B

Caporegime
Joined
19 Apr 2008
Posts
26,399
Location
Essex
I had an Uber account set up just in case I was stuck out and needed to get home without any cash - instead just having account got me in trouble.

Yesterday I saw some suspicious activity which I reported almost immediately however my PayPal account was charged over £300 for a journey I did not make.

15:47 - I get an email confirmation link to 'bryane' @ my domain. Thankfully as I have a catch all I could change the account email and password to something else.

15:50 - I see a cancelled journey for 15:41 and I report the suspicious activity to Uber who acknowledge this and reset my account again.

19:38 - I get a PayPal email stating I've paid £305.89 to Uber BV for a trip. I get another email shortly after with a receipt for the trip.

ZcTodZ0.png


So despite me telling Uber at 15:50 and them replying at 17:28, they still allowed this trip to continue for another two hours and billed me for it. It's also strange that this journey didn't show up on the app.

After kicking up a fuss on Twitter, someone from the social media team looked into it and I was refunded, but not before I cancelled everything associated with my PayPal account to stop the payment from being taken - fortunately it wasn't.

It looks like my account details were obtained somehow, and the email reset was just to stop me from getting in - that didn't work but dispite flagging the fraud immediately, little was done to stop it.

I have now asked that my account is closed and I have removed the app, and I urge anyone that has an account but hasn't used it to do the same because it's trouble waiting to happen. In fact I'd recommend that you don't use them at all because they are awful.
 
Last edited:
Is it really trouble waiting to happen or have you just been the victim of a phishing attack of some kind?

I've had Uber for a couple of years now and not had anything dodgy. (My bank actually mailed me about suspicious activity on my card before which was one of my legitimate Uber journeys)
 
I think it is trouble waiting to happen seeing as this is the first account of any type I have had compromised as I always use strong and non common passwords, so I am surprised it was this easy. Not to mention the fact I told them about it and still allowed a trip to take place from London > Dover > Gravesend.

I don't think I was phished because I hadn't logged in to Uber for a long long time beforehand and I've never logged in anywhere other than the app.

I do understand that this is the internet so whatever someone else has done or how negligent Uber were, it's still my fault.
 
Last edited:
Janesy B said:
I think it is trouble waiting to happen seeing as this is the first account of any type I have had compromised as I always use strong and non common passwords, so I am surprised it was this easy. Not to mention the fact I told them about it and still allowed a trip to take place from London > Dover > Gravesend.

I don't think I was phished because I hadn't logged in to Uber for a long long time beforehand and I've never logged in anywhere other than the app.

I do understand that this is the internet so whatever someone else has done or how negligent Uber were, it's still my fault.
Click to expand...

Uber was hacked earlier in the year and loads of user data was stolen. If you've had an account for a long long time, it's possible your data was part of that leak and its finally been sold to someone.

They also had a data leak a couple days back that exposed a lot of driver personal information.

Edit: Quick google... was back in May it was reported: http://www.bbc.co.uk/news/magazine-32900600

Edit: And another driver data breach in 2014: http://www.latimes.com/business/technology/la-fi-tn-uber-data-breach-20150227-story.html
 
You must log in or register to reply here.
Back
Top Bottom