Arrow-right Camera
The Spokesman-Review Newspaper
Spokane, Washington  Est. May 19, 1883

Washington state sues Uber over data breach cover-up

This Wednesday, March 1, 2017, file photo shows an exterior view of the headquarters of Uber in San Francisco. Uber paid $100,000 to hackers who stole data on the ride-hailing companys drivers and riders, then kept the massive data breach quiet for a year. This latest stain on Ubers reputation also raises serious questions about ransom payments to hackers, and legal implications as states and federal governments investigate whether Uber violated laws about notifying consumers about their stolen data. (Eric Risberg / AP)
Associated Press

SEATTLE – Washington state is suing the ride-hailing company Uber, saying it broke state law when it failed to notify more than 10,000 drivers in the state that their personal information was accessed as part of a major data breach.

Uber acknowledged last week that for more than a year it covered up a hacking attack that stole personal information about more than 57 million of the ride-hailing service’s customers and drivers.

Attorney General Bob Ferguson said Tuesday that because the drivers’ information that was accessed included names and license numbers, state law required Uber to notify them within 45 days. Nearly 11,000 drivers in Washington were affected.

Ferguson’s lawsuit seeks civil penalties in the millions of dollars.

In a statement Tuesday, Uber said it takes the matter seriously and is cooperating with regulators.