‘Fraud charges and breach not linked’

Both incidents unrelated, says Uber Singapore

SINGAPORE: Uber said there is no link between a customer in Singapore being fraudulently charged more than S$1,300 (RM3,973) for rides recently, and a massive global security breach of its platform last year.

An Uber Singapore spokesman said it has “no reason to believe” the two events are related, because during last year’s incident, its corporate systems or infrastructure had not been breached.

“Our outside forensics experts have not seen any indication that trip location history, credit card numbers, bank account numbers, NRIC (number) or dates of birth were downloaded,” the spokesman said on Wednesday.

On Tuesday, reports said Uber had covered up a security breach in October 2016, which exposed the personal information of about 57 million accounts on the ride-hailing platform.

The controversy, which involved Uber paying hackers US$100,000 (RM401,600) to keep secret the breach, was first reported on Bloomberg News.

In Singapore, Uber customer Jenna Lim posted on Facebook recently that she had been charged more than S$1,300 for some 30 transactions over a five-day period, starting from Nov 13.

“I believe someone from the US hacked into Uber’s security system and attained my bank account info,” Lim wrote.

Uber Singapore, however, said the two incidents are not related, and it is working with Lim to refund the charges.

It is also investigating three other cases of customers being charged for “phantom rides”, which have been reported in the media.

Asked if any Singapore users were affected by the October 2016’s global security breach, the spokesman replied: “We are in the process of notifying regulatory and government authorities and we expect to have ongoing discussions with them. — The Straits Times / Asia News Network