[Security](https://leakly.com/security/)

[Confirmed][Archive]

# Uber’s 2022 breach, surfaced on X by @vxunderground — confirmed

@vxunderground relayed Uber’s “cybersecurity incident” line on Sept 16, 2022 (UTC). Uber later blamed a Lapsus$-linked attacker.

Published 09 Nov 2026, 09:08 UTC · Leaked on 16 Sep 2022, 02:10 UTC

Leaked on 16 September 2022

![Evidence tray card: Uber’s 2022 breach, surfaced on X by @vxunderground — confirmed](https://leakly.com/assets/og/uber-breach-2022.png)

At 02:10 UTC on Sept 16, 2022, @vxunderground posted that Uber was responding to a “cybersecurity incident,” quoting the company’s own wording.

On Sept 19, The Verge reported that Uber blamed the Lapsus$ group, and that the hack, discovered the previous Thursday, had forced internal systems offline, including Slack. BleepingComputer reported that Uber found no evidence the attacker reached production systems holding sensitive user data.

Confirmed by Uber. The X post relayed Uber’s statement; it was not the first report.

[Confirmed]

## What happened later

Confirmed: Uber acknowledged the breach and attributed it to Lapsus$.

## Sources & captured post

> **vx-underground** @vxunderground
>
> Uber is currently responding to a "cybersecurity incident". https://t.co/MjyeI4VRcv
>
> 1,832 likes · 556 reposts · counts as of 09 Nov 2026, 07:12 UTC
>
> [View the post on X](https://x.com/vxunderground/status/1570595933641113601) · not in our leaker index

### Original source & corroborating coverage

* [Original X post by @vxunderground](https://x.com/vxunderground/status/1570595933641113601)
* [The Verge — Uber blames Lapsus$ hacking group for security breach](https://www.theverge.com/2022/9/19/23361511/uber-hack-blame-lapsus-gta-vi-rockstar)
* [BleepingComputer — Uber links breach to Lapsus$ group, blames contractor for hack](https://www.bleepingcomputer.com/news/security/uber-links-breach-to-lapsus-group-blames-contractor-for-hack/)

[Status definitions](https://leakly.com/editorial-guidelines/#status) · [Corrections](https://leakly.com/corrections/) · [Contact](https://leakly.com/contact/)