"As part of our investigation we are still waiting for technical reports which should give full confirmation of the figures and the type of personal data that has been compromised".
The State of Washington's Attorney General filed a complaint against Uber Technologies, Inc., (Uber) yesterday related to the 2016 hack that exposed the personal data of 57 million riders and drivers.
Because Washington's data breach law does not define "personal information" as including names, email addresses, and telephone numbers, the complaint filed by Washington Attorney General Bob Ferguson relates only to the Uber drivers residing in Washington. Uber waited more than a year, Ferguson said.
Washington law requires both affected consumers and the attorney general's office to be notified within 45 days of the breach. Almost 11,000 drivers in the state were affected. The incident took place previous year but was only revealed last week. The suit is the first enforcement action under the 2015 amendments to Washington's data breach law, and the damages theory will likely amount to several millions of dollars.
The government said the new Data Protection Bill would grant the ICO further powers to defend consumer interests, and issue even higher fines of up to £18m, or 4% of an organisation's global turnover in exceptional cases.
"Uber's conduct has been truly stunning".More news: Union: Thousands of American Airlines flights have no pilots after schedule glitch
More news: LeBron James on David Fizdale firing: 'I need some answers'
More news: Kris Jenner likens daughters' pregnancies to 'a faucet that won't turn off'
By submitting your personal information, you agree that TechTarget and its partners may contact you regarding relevant content, products and special offers. Uber has now started to reveal more information about what happened.
In a statement, Uber said the 2.7 million figure was still an approximation, not an accurate or definitive number.
Ferguson's lawsuit is the first from a state, although attorneys general in New York, Missouri, Massachusetts, Connecticut and IL have begun investigations, and the city of Chicago and Cook County have filed a lawsuit.
"We are monitoring the affected accounts and have flagged them for additional fraud protection", the company said.
That revelation prompted a delay in a high-profile trial over whether Uber stole self-driving vehicle technology from Waymo, a Google spinoff.