A 20-year-old Florida man was responsible for a massive data breach at Uber last year, although his identity could not be established, Reuters reported on Wednesday.
The big attraction startup revealed last month thatin October 2016. The stolen data included personal information such as names, email addresses and Driver's license numbers, but not Social Security numbers and credit card information, the company said.  Uber said he paid $ 100,000 to the data thieves at the time of deleting the information. But the company did not disclose any details about the hacker or how he paid the money. Sources close to the hack told Reuters that the payment was made through a program designed to reward hunters for errors that report flaws in a company's software. Uber's bug-reward service is hosted by HackerOne, a company that connects security researchers with companies.
While three sources familiar with the hack told Reuters that a Florida man was responsible, the news agency said it could not identify the man. ] Uber has said that hackers accessed names and email addresses, as well as the driver's license numbers of 600,000 Uber drivers, stealing the password to a database in the cloud hosted by Amazon Web Services. Uber said he first noticed the hack in November 2016. Since then, CEO Travis Kalanick resigned and.
The disclosure has had its beginning in. The New York State Attorney General has opened an investigation into the incident, while the New Mexico Attorney General has sent Uber a letter requesting details of the hack and how the company responded. Officials from Connecticut, Illinois and Massachusetts also confirmed that they are investigating the hack.
Uber may also have breached a promise made in an agreement of the Federal Trade Commission to not mislead users about privacy and data security.
Uber declined to comment, while representatives of HackerOne did not immediately respond to a request for comment.
CNET Dara Kerr and Laura Hautala contributed to this report.
CNET Magazine : See a sample of the stories in the CNET kiosk edition.
It's complicated : This is coming out in the applications age. You are having fun? These stories get to the heart of the matter.