By The Chronicle
Washington Attorney General Bob Ferguson announced Tuesday his office had filed a consumer protection lawsuit against Uber, alleging that the ride-sharing company waited more than a year to notify the state of a data breach affecting 57 million passengers and drivers, including 10,888 drivers in Washington.
“Washington law is clear: When a data breach puts people at risk, businesses must inform them,” Ferguson said in a statement. “Uber’s conduct has been truly stunning. There is no excuse for keeping this information from consumers.”
The lawsuit alleges Uber violated the state’s data breach notification law.
This is the first lawsuit filed under the new requirements. It was filed in King Count Superior Court Tuesday.
According to the AG’s Office, an individual contacted Uber in November 2016 claiming he had accessed the company’s user information. Uber confirmed that person and another had accessed files including names, email addresses and phone numbers of 50 million passengers worldwide.
The suit asks for civil penalties of up to $2,000 per violation and recovery of the state’s costs and fees. Senior Counsel Shannon Smith and Assistant Attorneys General Tiffany Lee and Andrea Alegrett are handling the case.