Top Uber rival leaks user and driver data online

• Indian ride-sharing company Rapido was found leaking driver and customer data
• The flaw stemmed from a faulty API
• The company was leaking names, emails, and phone numbers

A major Indian ride-hailing platform was exposing sensitive user data thanks to a bug in one of its APIs.

The flaw in Rapido's systems was discovered by security researcher Renganathan P, who claimed it stemmed from a website form designed to collect feedback from auto-rickshaw users and drivers. Auto-rickshaw is a three-wheeled vehicle, popular across India and many Asian countries.

Users that provided the feedback have had their sensitive information exposed to the public, including full names, email addresses, and phone numbers.

Rapido exposure

The database has been seen by TechCrunch, which confirmed its authenticity. The data was supposed to be shared with a third-party service, used by Rapido, only, but the publication says the database counts more than 1,800 feedback ...