According to resources, the person who has hacked Uber’s system has complete access to the company, causing a total compromise.

Uber’s spokesperson has taken to the media and informed that the company is investigating the
matter and contacting law enforcement officials.

Uber employees have been directed not to use the company’s internal messaging service, Slack.

The employees have mentioned that the other internal systems were also inaccessible.

Before the Slack system was taken down on Thursday, the company’s employees received a
message from the hacker stating, “I announce I am a hacker, and Uber has suffered a data
breach.” The message also listed several internal databases that the hacker compromised.

The Uber spokesperson said the hacker used a worker’s Slack account to send the message. The
hacker has stated that he used the “Social engineering” technique to compromise Uber’s systems.
The hacker sent a message to the employee claiming to be a corporate information technology person. The employee was asked to hand over their password, which the hacker used to acquire
access to the company’s system.

A similar technique was also used to hack Twitter, Microsoft, and Okta.

In the end, we arrive at the following conclusive points:

• All major companies like Uber need to have a in-depth defense approach system.
• The hacker used Slack to compromise the company’s system, so to what extent is Slack
compromised?
• Uber needs to have a vendor security and vendor security verification system.
• A company like Uber needs a top-notch security system and a keen eye to check third￾party systems. No wonder who was incharge of this in Uber who left such vulnerability in
the system.
• With sources telling the person who claims to be the hacker has all the access to the
company’s codes and emails, this hack seems to be the tip of the iceberg, and it looks like
more to come.
• And then, at last, the most critical question: Did uber follow the best IT practices with the
least privileges?