Thousands of Uber users account credentials are up for sale on dark web marketplace AlphaBay for less than $1.
Two vendors from the AlphaBay marketplace, named Courvoisier and ThinkingForward, are selling Uber logins, which includes usernames and passwords.
Using the credentials, anyone can access the user’s trip history, gather personal details including home address, phone number and last four digits of the credit card along with its expiration date.
Motherboard cited ThinkingForward’s product listing as saying: "I will guarantee that they are valid and live ONLY. Discounts on bulk purchases."
It is being speculated that vendors got hold of the data through mass breaching or they could have compromised individual user account.
Uber denied the allegations saying: "We investigated and found no evidence of a breach. Attempting to fraudulently access or sell accounts is illegal and we notified the authorities about this report.
"This is a good opportunity to remind people to use strong and unique usernames and passwords and to avoid reusing the same credentials across multiple sites and services."
The publication went on to contact three users whose account details were up for sale and found out that the stolen credentials matched.
Previously personal details of nearly 50,000 drivers were exposed when, the company acknowledged that fact that its database was accessed by a third party.
