Update: Uber Experiences Third Breach in 6 Months They also experienced a third party security breach that compromised their digital supply chain security. In addition to the September 2022 breach described below, it's clear that Uber as an enterprise company can do better for their customers and drivers.

As of early 2026, Uber has not reported a major, system-wide data breach since the high-profile incident in late 2022/early 2023. In that famous 2022 hack, an 18-year-old associated with the "Lapsus$" group used "MFA Fatigue" (bombarding an employee with login requests until they accidentally hit 'Approve') to gain access to Uber's internal Slack, AWS, and Google Suite environments. While no customer credit card data was stolen in that specific event, it highlighted significant vulnerabilities in their internal security. Since then, Uber has implemented much more aggressive security protocols, including a move toward "FIDO2" physical security keys for employees and more robust "zero-trust" architecture to isolate their core databases. While there are frequent "minor" reports of individual account takeovers (usually due to users reusing passwords from other site leaks), the company has remained relatively stable on the cybersecurity front throughout 2024 and 2025. However, travelers are always advised to use Two-Factor Authentication (2FA) on their Uber accounts and to never share a verification code sent via SMS with anyone, even someone claiming to be "Uber Support," as social engineering remains the most common way hackers bypass modern defenses.