FTC Revises Settlement Agreement In Cyber Breach Incident

The Federal Trade Commission ("FTC") filed a revised Complaint against Uber Technologies, Inc. ("Uber"), alleging that the company failed to disclose a significant breach of customer data that occurred in 2016 while still in negotiation with regulators regarding its mishandling of an earlier data breach incident from 2014. Uber has agreed to expand the proposed settlement agreement with the FTC.

In the initial Complaint, the FTC alleged that Uber misled consumers about its privacy and data security practices. According to the FTC, during the investigation Uber learned that its third-party cloud provider's servers had been subject to a significant data breach. The FTC revised its complaint to charge that Uber failed to disclose this new information to the FTC or its customers. Allegedly, the intruders were able to download an estimated "25 million names and email addresses, 22 million names and mobile phone numbers, and 600,000 names and driver's license numbers of