Hackers plead guilty to breach that Uber covered up – Naked Security


Remember when Uber was hacked but paid the hackers $100,000 in hush money to delete the data and zip their lips about it?

The two guys who did the hack, they’re going down.

Brandon Charles Glover, 26, of Florida, and Vasile Mereacre, 23, of Toronto, each pleaded guilty on Wednesday in a San Jose court house in California to one charge of conspiracy to commit extortion involving computers. Specifically, they pleaded guilty to stealing companies’ personal information that was stored on Amazon Web Services from October 2016 to January 2017 and then demanding money to destroy their copies of the data.

They each face up to five years in prison and a fine of $250,000 and will be sentenced in March 2020. Maximum sentences are rarely handed out.

With the guilty pleas, Uber’s elaborate coverup has been dragged back into the limelight.

The data of 57 million drivers and customers was stolen in the 2016 data breach. Uber not only kept the breach secret from the victims, it also paid $100,000 in hush/delete-the-data money, as in, $50,000 to each of the two crooks.