Skip to content

BlogIndustry

Uber leaks trip data and personal info via a simple Google search

Ken Simpson

1 min read

Updated

Read updated post here

Fetching this Google search URL provides a listing of random Uber trips that were somehow indexed by the search giant’s spider: www.google.com/?q=site:trip.uber.com:

Google search results for the domain 'trip.uber.com' reveal private trip information

Credit for this discovery goes to Mikko Hypponen of security firm F-Secure.

Searching for stuff on https://t.co/HXxwZnnWAW gets you information like this. pic.twitter.com/lfQlbN806W

— Mikko Hypponen (@mikko) September 2, 2015

Update (4:54pm PDT)

Uber appears to have fixed the problem by amending robots.txt to explicitly deny all indexing of trip.uber.com.

Stay updated with MailChannels

Subscribe to the MailChannels Blog to receive new blog posts in your inbox.

Start with your app’s email

Create an account

Send your first email in minutes, with 100 free emails a day. No sales call needed.

Running a platform?

Move one workflow to us, with written success criteria, and judge the result.