It appears that cyber-attacks are getting more prevalent with every passing day and the latest victim of these attacks is the ride-hailing service, Careem.
Careem released a statement today, admitting to the fact that the company suffered a massive data leak after a cyber-incident in January earlier this year. The statement elaborated that in the data leak, customers’ information including their names, email addresses, phone numbers and trip data were compromised.
The ride-hailing service giant claimed however, that customers’ credit card information and their passwords were not affected during the attack.
“There is no evidence that your password or credit card number have been compromised. Customers’ credit card information is kept on an external third-party PCP-compliant server. A PCP server uses highly secure protocols and is employed by international banks around the globe to protect financial information,” according to a statement.
It was not revealed whether the information of Pakistani customer base was also hacked, but it appears that users from all around the world were affected by the breach.
While speaking to a local newspaper, a Careem spokesperson stated that “at the time of the attack on January 14, Careem had 14 million customers worldwide and 558,000 captains on its platform. Those who have signed up since then are not affected by the breach.”
When asked why Careem took so long to reveal this news to its customers, the spokesperson said that “Cybercrime investigations are immensely complicated and take time. We wanted to make sure we had the most accurate information before notifying people.”