
The online taxi order service “Citimobil” notified Roskomnadzor about the leak of customer and drivers data and contacted law enforcement agencies. According to the PR director of the company Ekaterina Zubenina, from December 23, an internal investigation is carried out, "which will determine what other data has become available to attackers."
On December 23, information that more than 4 thousand photographs (in the JPG format) of drivers of the Citimobil taxi service (in the format of JPG format) got into open access. On December 27, it became known that a day earlier, almost 4 million unique customer phone numbers and 80.7 thousand unique drivers of drivers allegedly “Citimobil” were posted into open access.
“The data that are now in public access are impersonal phone numbers and quantitative indicators of trips made using the service. The fact that most numbers have already been available in the base of merged numbers in connection with large leaks of other services earlier does not reduce the level of our responsibility, ”said Zubenina.
She noted that the company is trying to limit themselves to depersonalized data that would be sufficient to achieve the goals of their processing, but, despite this, "apologizes to each user and driver of the partner parks, whose personal data turned out to be in the public domain."
Zubenina stated that the company takes responsibility for what happened, all the perpetrators will be punished.