ICO fines Uber ยฃ385,000 over data protection failings

The Information Commissionerโ€™s Office (ICO) has fined ride sharing company Uber ยฃ385,000 for failing to protect customersโ€™ personal information during a cyber attack. A series of avoidable data security flaws allowed the personal details of around 2.7million UK customers to be accessed and downloaded by attackers from a cloud-based storage system operated by Uberโ€™s US parent company. This included full names, email addresses and phone numbers. The records of almost 82,000 drivers based in the UK โ€“ which included details of journeys made and how much they were paid โ€“ย were…