[Security](https://leakly.com/security/)

[Confirmed][Archive]

# Uber’s 2022 breach, surfaced on X by @vxunderground — confirmed

@vxunderground relayed Uber’s “cybersecurity incident” line on Sept 16, 2022 (UTC). Uber later blamed a Lapsus$-linked attacker.

Leaked on 16 September 2022

![Evidence tray card: Uber’s 2022 breach, surfaced on X by @vxunderground — confirmed](https://leakly.com/assets/og/uber-breach-2022.png)

At 02:10 UTC on Sept 16, 2022, @vxunderground posted that Uber was responding to a “cybersecurity incident,” quoting the company’s own wording.

> **vx-underground** @vxunderground
>
> Uber is currently responding to a "cybersecurity incident". https://t.co/MjyeI4VRcv
>
> 1,832 likes · 556 reposts · counts as of 09 Nov 2026, 07:12 UTC
>
> — vx-underground (@vxunderground) [September 16, 2022](https://twitter.com/vxunderground/status/1570595933641113601)

not in our leaker index

On Sept 19, [The Verge](https://www.theverge.com/2022/9/19/23361511/uber-hack-blame-lapsus-gta-vi-rockstar) reported that Uber blamed the Lapsus$ group, and that the hack, discovered the previous Thursday, had forced internal systems offline, including Slack. [BleepingComputer](https://www.bleepingcomputer.com/news/security/uber-links-breach-to-lapsus-group-blames-contractor-for-hack/) reported that Uber found no evidence the attacker reached production systems holding sensitive user data.

Confirmed by Uber. The X post relayed Uber’s statement; it was not the first report.

[Confirmed]

## What happened later

Confirmed: Uber acknowledged the breach and attributed it to Lapsus$.

## Sources

* [Original X post by @vxunderground](https://x.com/vxunderground/status/1570595933641113601)
* [The Verge — Uber blames Lapsus$ hacking group for security breach](https://www.theverge.com/2022/9/19/23361511/uber-hack-blame-lapsus-gta-vi-rockstar)
* [BleepingComputer — Uber links breach to Lapsus$ group, blames contractor for hack](https://www.bleepingcomputer.com/news/security/uber-links-breach-to-lapsus-group-blames-contractor-for-hack/)

[Status definitions](https://leakly.com/editorial-guidelines/#status) · [Corrections](https://leakly.com/corrections/) · [Contact](https://leakly.com/contact/)