---
schema_version: "secwatch.filing_event.v1"
accession: "0001552781-22-000558"
form_type: "8-K"
ticker: "UBER"
cik: "0001543151"
company_name: "Uber Technologies, Inc"
filed_at: "2022-09-19T23:59:59+00:00"
generated_at: "2026-06-23T08:48:49.758958+00:00"
event_type: "cyber"
sentiment: "negative"
materiality_score: 0.7
calibrated_materiality_score: 0.7
confidence: "high"
source: SEC EDGAR
---

# Uber discloses cybersecurity breach; attacker gained internal system access but no evidence of user data compromise

## Summary
- An Uber contractor's account was compromised via a dark web password and MFA fatigue, giving the attacker access to internal tools.
- Attacker accessed Slack, HackerOne dashboard, and an internal finance tool; no evidence of accessing production systems or sensitive user data (credit cards, bank info, trip history).
- Uber rotated keys, locked codebase, blocked compromised accounts, and required re-authentication; customer services remained operational.
- Investigation ongoing with leading digital forensics firms; Uber is in coordination with the FBI and DOJ.
- The attacker is believed to be affiliated with the Lapsus$ hacking group, which has previously breached Microsoft, Cisco, and Nvidia.

## SEC filing metadata
- accession: 0001552781-22-000558
- form_type: 8-K
- ticker: UBER
- cik: 0001543151
- company_name: Uber Technologies, Inc
- filed_at: 2022-09-19T23:59:59+00:00
- event_type: cyber
- sentiment: negative
- materiality_score: 0.7
- calibrated_materiality_score: 0.7
- confidence: high
- sec_items: 7.01, 9.01
- EDGAR index: https://www.sec.gov/Archives/edgar/data/1543151/000155278122000558/0001552781-22-000558-index.htm
- EDGAR primary document: https://www.sec.gov/Archives/edgar/data/1543151/000155278122000558/e22427_uber-8k.htm

## Machine-readable alternates
- HTML: https://secwatch.observer/filing/0001552781-22-000558
- JSON: https://secwatch.observer/filing/0001552781-22-000558.json
- Plain text: https://secwatch.observer/filing/0001552781-22-000558.txt

This AI-assisted summary is a reading aid. Review the linked SEC EDGAR filing before relying on any specific claim.