Uber Technologies, Inc.

Documented cases and incidents involving Uber Technologies, Inc..

1 Case

Uber 2022 Breach: MFA Push-Bombing and IT-Support Impersonation of a Contractor

A Lapsus$ affiliate used a contractor's stolen Uber password, likely bought on the dark web, flooded them with MFA push prompts, then posed as tech support to get one approved, opening the door to Uber's internal network.

Incident 2022Read →

Explore more

Browse the rest of the library

Other companies

AFGlobal Corporation 1 Alkem Laboratories Ltd. 1 American United Mortgage Company 1 Anthem Inc. 1 Argan, Inc. 1 Arup 1 Brownsville Community Development Corporation 1 Cabarrus County, North Carolina 1 Caesars Entertainment, Inc. 1 Carnival Corporation & plc 1 Clorox 1 CoHost 1 Council on Foreign Relations 1 Crelan Bank 1 View all companies →

Browse by attack type

Phishing 72 Vishing (Voice Phishing) 27 Smishing (SMS Phishing) 13 ClickFix & SEO Poisoning 6 Quishing (QR Code Phishing) 7 Deepfake & Synthetic Media 15 Physical Social Engineering (Tailgating & Baiting) 22 Pretexting & Impersonation 22 Agentic AI Attacks (AI-Powered Social Engineering) 17 Help-Desk & MFA Manipulation 3