GrabCar fined S$10,000 for risking the personal data of over 20,000 drivers and passengers

Grab app

Last year, GrabCar informed the Personal Data Protection Commission (PDPC) that profile data of 5,651 GrabHitch drivers were exposed to the risk of unauthorized access by other GrabHitch drivers through its app.

According to PDPC deputy commissioner Yeong Zee Kin, the cause of the breach was due to an app update on Aug 30, 2019. “The purpose of the update was to address a potential vulnerability discovered within the Grab app,” he said.

Risking the personal data of over 20,000 drivers and passengers

On Sep 10, the PDPC stated that the update risked the personal data of 21,541 drivers and passengers of GrabHitch. This includes profile pictures, names, and vehicle plate numbers.

But GrabCar managed to roll back the app to the previous version within about 40 minutes. They also took other corrective actions.

“Given that the organization’s business involves processing large volumes of personal data on a daily basis, this is a significant cause for concern,” PDPC said.

The technical details & insufficient robust processes

As per the PDPC’s findings, the app’s programming interface URL which allowed drivers to access their data had contained a “userID” portion. Manipulation to that particular portion could possibly allow access to other drivers’ data.

Mr Yeong said GrabCar had insufficient robust processes to manage changes to its IT system. As a result, putting personal data it was processing at risk.

“This was a particularly grave error given that this is the second time the (GrabCar) is making a similar mistake, albeit with respect to a different system,” he added.

Not the first time with a similar mistake in 2019

In 2019, GrabCar was fined S$16,000 after it sent out more than 120,000 marketing emails to customers containing the name and mobile phone number of another customer.

Grab explained that the incident was due to a mismatched database. Thus, each affected customer’s name and phone number was disclosed to one other individual.

The Grab spokesperson then said that to prevent a recurrence, they had immediately put in place more rigorous data validation and checks. This includes new processes that require a third person to perform sanity checks on data. They also promised to mask phone numbers in all their marketing campaigns.

Grab’s response this time around

To prevent this incident from happening again, Grab claims to have introduced more robust processes. This is especially so to their IT environment testing alongside updated governance procedures. They are also working on an architecture review of their legacy application and source codes.

Read More...

Grab is giving you a ride at more than half price! All GrabHitch rides will be at 60% OFF from 14 – 21 Sep 16

Need a ride to get you around Singapore? Well, hitch a ride.

Share a ride with another regular commuter that is going the same way with GrabHitch!

From 14 – 21 Sep, get 60% off all GrabHitch rides when you enter the promo code WHILE60LASTS when you select the GrabHitch option.

Only valid with booking made using a credit card, via GrabPay. Limited to two rides per day, for each passenger.

*Terms and Conditions Apply. More at grb.to/while60lasts

Pro Tip: Create your route and book a ride at least the night before to ensure that you maximise the odds of getting a Hitch driver!

grabhitch

Share this promo code with your friends and let them save!

Read More...

Grab: Free Rides Friday – Pay $0 and travel anywhere for FREE with GrabHitch (22 Jul 16)

Grabhitch Free Ride

If you haven’t tried Grab’s ride sharing service GrabHitch before, Friday’s the time to do it.

On July 22 (FULL DAY), enjoy GrabHitch rides for $0. Yes, you saw it right, travel ANYWHERE for FREE,  the ENTIRE DAY!

WHAT DO I HAVE TO KNOW? (INSIDER TIPS!!)

  • GrabHitch Drivers are all everyday commuters just like you! Many of them have to go slightly out of their way to give you a ride. So do offer to sit in the front seat just like you would with a friend who’s driving you.
  • Thank the driver who’s taking time off their busy schedule so that you can save time off yours
  • We’re expecting insane demand, book your ride 1 hour before. Hell, book it before you go to sleep to have the best chance of our drivers picking you on their way to work.
  • Tell your driver if you’re bringing extra friends, pets or bags.

—————————————————————————————————————————————–

grabhitch free

WHAT SHOULD I DO?

  1. Click on the GrabHitch icon
  2. Key in your pick up point , drop off point
  3. Select the time you want you to be picked up
  4. Key in the promo code “HitchFriday
  5. Book and wait for a friendly driver to accept your ride!
  6. Get picked up by our friendly driver, sit in the front seat and thank him for the ride!
  7. Advice: If you have extra passengers, pets or bags, let the driver know in the Notes to driver

promo code 2

————————————————————————————————————————————

WHAT ARE THE PROMOTION DETAILS?

  • Promotion is valid for all GrabHitch rides on July 22 for rides between Midnight and 1159pm.
  • Limited to 2 rides per passenger
  • For any disputes, contact our friendly customer support via the in-app “Support” function shown below. We’ll get it sorted out for you!support

Share this promo code with your friends and let them save on their rides!

Read More...