Personal info of 14M CareeM users stolen

dubai — Cyber criminals have stolen the personal data of more than 14 million customers of the popular Dubai-based ride-hailing service Careem.

In a blog post on Careem’s website on Monday, it said that on January 14 it “identified a cyber incident involving unauthorised access to the system we use to store data”. In a separate statement to Khaleej Times, a company spokesperson said it could not share how many people were affected in the UAE as it “does not disclose market data”, but it did share an overall figure. “A total of 20 million customers have signed up across our platforms. We are currently in 14 countries and close to 100 cities. Fourteen million of these customers were affected by the incident.”

On January 14, Careem said, it “became aware” that online criminals gained access to its computer systems which hold customer and captain (drivers) account data.

Although the blog stated there is “no evidence” that password or credit card numbers have been compromised, it did state that the online criminals hacked personal information including customers’

name, email address, phone number and trip data.

“A PCP server uses highly secure protocols and is employed by international banks around the globe to protect financial information,” the blog read.

However, it did reiterate that customers and captains who signed up with the service after January 14 will not have been affected by the data hack.

Careem stated that as soon as it detected the breach, a thorough investigation was launched which engaged leading cyber security experts to assist in strengthening its security systems.

“We are also working with law enforcement agencies. Since discovering the issue, we have worked to understand what happened, who was affected, and what we needed to do to strengthen our network defences.”

While Careem said it has “seen no evidence of fraud or misuse related to this incident”, it said its main responsibility was to be open and honest with customers.

Careem said it understands the importance of customer privacy and it regularly reviews and updates its security systems, thought “this time it wasn’t enough to prevent an attack”.