Following an investigation the Colombia DPA had found that between October and November 2016, an unauthorised party had accessed personal data that Uber had stored in its third-party cloud provider’s servers. The unauthorised party gained access by utilising an access key an uber engineer had shared online. Once the access key was used, the hackers were able to download unencrypted files that contained personal data. The hackers were able to access Uber’s GitHub page via passwords that had been exposed prior through data breaches. To read more: Click here