Uber has experienced several high-profile data breaches and security incidents throughout its history. Significant events include a 2014 breach affecting 100,000 users, and a massive 2016 breach where hackers stole data from 57 million customers and drivers (which Uber famously paid 100,000tohide).In∗∗September2022∗∗,asophisticatedsocialengineeringattackbytheLapsus group gave a hacker access to Uber’s internal Slack, G-Suite, and AWS environments. In late 2022 and early 2023, the company faced additional leaks via third-party vendors and law firms. While Uber has since implemented much more rigorous "Zero Trust" security and Multi-Factor Authentication (MFA) protocols to combat "MFA fatigue" and social engineering, these historical incidents have made the company a case study in both cybersecurity vulnerability and the legal consequences of non-disclosure.