Lessons Learned from Employee and Company Messaging Apps
by / ⠀Blog• Entrepreneurship• Startup Advice / October 31, 2022
Uber is perhaps the world’s most well-known platform company and company messaging apps, offering ride-hailing, service provision, food delivery, parcel delivery, and couriers in 72 countries and more than 10,500 cities worldwide. Being such a big company, you would think they would have matters like online security nailed, but this appears not to be the case.
In September 2022, an individual sent a message on the Uber employee Slack channel, stating they were a hacker and had accessed several of the company’s internal databases, including the AWS console, Slack, Google Workspace, and its security systems. The Uber staff was immediately told to stop using Slack, and Uber confirmed the breach a day later, stating they were looking into the situation.
But then, the media started reporting that the hack happened because of an 18-year-old who obtained access to Slack through a simple phishing attempt. Posing as an employee from corporate IT, they tricked another staff member into handing over their login and password. The hacker then used this information to access Slack and post several messages, including poking fun at the company and criticizing them for not paying employees well.
Though barely an adult, the hacker most likely joined forces with a hacking group called Lapsus$. This group links to several attacks on technology firms. Uber claims that he breached no user data and no other serious results from the hack occured. But, the damage to its reputation, both publicly and among staff, is not easily repaired. This is why it is very important to have a social media and communications strategy in place.
Previous Post