Your Uber account is handy for catching a ride. It may also be handy for someone else to get around town on your dime.
Stolen Uber customer accounts have turned up for sale on the dark web for as little as $1, according to a report by the website Motherboard.
One seller claims to have “thousands” of user logins for sale.
A spokesperson for Uber told Motherboard they have found no evidence of a hack, but have notified police regarding the claims.
“This is a good opportunity to remind people to use strong and unique usernames and passwords and to avoid reusing the same credentials across multiple sites and services,” the Uber spokesperson said.
Motherboard reported that AlphaBay market, a newly launched dark website site, a vendor named Courvoisier has a listing for active Uber usernames and passwords for $1. Another vendor, ThinkingForward, makes a similar claim but for $5 with a discount if a buyer purchases in bulk.
While Uber’s investigation turned up no compromise, Motherboard reached out to a person whose username and password was for sale. He confirmed the information was valid.
Motherboard also reached out to the vendor Courvoisier, who confirmed the Uber information was “Hacked accounts buddy. I have thousands :)”
The vendor has sold more than 100 Uber usernames and his service gets positive reviews on the dark website. “Works perfect,” wrote one.
