Hackers steal data of 14 mln Careem customers

Dubai-based ridesharing app Careem on Monday said hackers had stolen personal data of up to 14 million people in the Middle East, North Africa, Pakistan and Turkey.

The cyber-attack was detected on January 14, it said in a statement, adding, "names, email addresses, phone numbers, and trip data were stolen".

"As soon as we detected the breach, we launched a thorough investigation and engaged leading cybersecurity experts to assist us in strengthening our security systems. We are also working with law enforcement agencies," the statement added.

Careem said there was "no evidence of fraud or misuse related to the incident".

"There is no evidence that your password or credit card number have been compromised," the statement said. 

"Customers’ credit card information is kept on an external third-party PCP-compliant server," it added.

The company apologized for the breach, adding it remains "dedicated to our mission of supporting the millions of captains and customers in the region who depend on Careem to earn a living and get around".

Meanwhile, it urged customers to implement "good password management" by updating their Careem password and remain cautious of any unsolicited communications that ask for personal information.

Founded in 2012, Careem’s investors include Saudi Arabia-based STC Ventures, Al Tayyar Travel Group and Kingdom Holding.