Uber’s 2022 breach, surfaced on X by @vxunderground — confirmed
@vxunderground relayed Uber’s “cybersecurity incident” line on Sept 16, 2022 (UTC). Uber later blamed a Lapsus$-linked attacker.
Leaked on 16 September 2022
At 02:10 UTC on Sept 16, 2022, @vxunderground posted that Uber was responding to a “cybersecurity incident,” quoting the company’s own wording.
On Sept 19, The Verge reported that Uber blamed the Lapsus$ group, and that the hack, discovered the previous Thursday, had forced internal systems offline, including Slack. BleepingComputer reported that Uber found no evidence the attacker reached production systems holding sensitive user data.
Confirmed by Uber. The X post relayed Uber’s statement; it was not the first report.