It was in November last year that the AG’s office opened up an investigation into the alleged tracking tools of Uber’s, which happens to be an aerial map of its cars. On a separate note, Uber did inform the AG in February that as early as all the way back in May 2014, Uber had already experienced a data breach. In this data breach, Uber alleged that an unauthorized third party managed to gain entry to its driver names and license numbers, and the overall impact was assessed to cover close to 50,000 drivers, and across multiple states to boot.
The settlement today would mean that both investigations have been resolved, and on Uber’s part, they will need to fork out a $20,000 fine because they did not provide timely notice to drivers and Schneiderman’s office concerning the data breach. Apart from that, Uber is now required to encrypt its geo-location information while adopting multi-factor authentication.