Based on the information present in the breach, I think it's likely that the source was their customer support in the Philippines. Monthly salary is usually < 1000$/month (entry-level probably even less than 500$) and a 5000$ bribe could be more than a year worth of money, tax-free. Considering the money you can make with that dataset now, this is just a small investment.
> •Name, address, phone, and email; •Masked Social Security (last 4 digits only); •Masked bank-account numbers and some bank account identifiers; •Government‑ID images (e.g., driver’s license, passport); •Account data (balance snapshots and transaction history); and •Limited corporate data (including documents, training material, and communications available to support agents).
This is every threat actor's dream. Even if you only had email addresses and account balances, this is a nightmare. Instead of blackmailing the company, you can now blackmail each individual user. "Send me 50% of your BTC and I won't publish all of your information on the internet". My guess is that we will have a similar situation like we had with the Vastaamo data breach...
How much are they costing us?
our service – which already provides over 150,000
trips per week across Phoenix, Los Angeles, San
Francisco, and Austin
Interesting. That's about 8 million rides per year.I wonder how close they are to being profitable? As soon as they are getting close to being profitable, they will probably scale this up super fast.
I don't know how much Google invested into Waymo so far. Something like $10B?
If they at some point make $10 per ride, they would only need something like 50 million rides per year to justify that investment with a p/e ratio of 20.
To go from 8M rides to 50M in 5 years they would have to increase their capacity by 50% per year. Might be possible?
For example, “continue watching” is never in the same place in my experience.
Whereas in Plex it’s always top and center meaning I can always find it instantly.
Pirating is again becoming the superior product, even though I’ve already paid plenty for the legal options.