Overview
- Uber Freight said on Tuesday it detected unauthorized access to part of its systems, contained and remediated the issue, and that business operations remained unaffected.
- A group calling itself Helix posted files to a public leak site claiming nearly 1 million Uber Freight records and saying the haul included mailboxes, cloud drives, accounts‑payable files and dispatch documents.
- TechCrunch and other outlets reviewed sample files that appear to show email exchanges with customers, but independent verification of the files’ authenticity is still incomplete.
- Google Threat Intelligence has tied Helix to a wider umbrella tracked as UNC6671 and says the group uses voice phishing and fake sites to trick helpdesks into resetting credentials and has taken at least $10.6 million in bitcoin ransoms this year.
- Federal law enforcement is engaged and investigators, customers and regulators will be watching for firm updates on which records are genuine, whether a ransom was paid, and any required notifications to affected shippers or drivers.