Active Uber accounts are for sale on a dark web marketplace for as little as $1 each, Motherboard reported.
Armed with a username and password, the buyer can access the user’s trip history, including a home address and other personal details.
Credit card information is not fully exposed, but one can view the last four digits and expiration date of the user’s card in the user’s account, which is all they need in many phone discussions with company officials.
One seller on dark web site AlphaBay market claims he has “thousands” of user logins for sale.
A vendor calling themselves Courvoisier offers a listing for ‘x1 UBER ACCOUNT – WORLDWIDE TAXI!’ For $1 each.
Another vendor, ThinkingForward, sells them for $5, promising: “I will guarantee that they are valid and live ONLY. Discounts on bulk purchases.”
An Uber spokesperson said in a statement they found no evidence of a breach of their records: “We investigated and found no evidence of a breach. Attempting to fraudulently access or sell accounts is illegal and we notified the authorities about this report. This is a good opportunity to remind people to use strong and unique usernames and passwords and to avoid reusing the same credentials across multiple sites and services.”