The value of stolen Uber account information is plummeting. Usernames and passwords for the transportation service are going for 40 cents on the dark Net, more than half off the price the same credentials were going for after Uber accounts first went up for sale in March.
Information from more than 6,100 Uber accounts has been sold by six vendors on the dark Net, the hidden criminal section of the Internet only accessible with anonymity software. Accounts were initially being sold for about $1 each, though current prices are hovering around 40 or 50 cents, Vice Motherboard reported. It's not clear what caused the price drop, though Uber has enacted two-factor authentication and other improved security measures in the months since it became clear that hackers were successfully reusing passwords leaked in other data breaches on random Uber accounts.
“Uber has taken this issue very seriously and has refunded anyone who was affected,” an Uber representative told Motherboard. “We would still like to remind our users to use a unique password for their Uber account.”
Whatever the case, and there's been no suggestion that Uber was breached in this instance, dark Net operators are not thrilled. “I will not accept any refund/replace if Uber asks about any verification,” one seller wrote.