It is ingenuine on their part to not report how detailed the trip data they have is. Trip data could easily show Users' home/office locations, their daily travel patterns, their kid's daycare and whatnot. This kind of knowledge can be extremely dangerous if it falls into the wrong hands. Careem should be more straightforward about this and explain the consequences, rather than slyly gloss over the most dangerous part of the breach by mentioning only two effing words about it.
They also have only said when they figured out the breach, but not when the breach was. It could have happened a day before January 14th, or 3 months before January 14th. The difference is how much trust I would give them.
Interestingly they said the breach was done by "online criminals". Do they know, or do they automatically assume that people illegally accessing systems are criminals?
My hunch is the distinction they're trying to make is between criminals who steal data for nothing more than monetary gain versus those who would steal such data for more nefarious reasons, perhaps on behalf of a nation.
> This kind of knowledge can be extremely dangerous if it falls into the wrong hands.
Let’s not go overboard with the panic just yet. The world isn’t some spy novel where nefarious actors are constantly trying to kill you or your children.
How do I know? Because if you are not currently under protection, I could easily create all the location history I might want within a week. And nobody willing to abduct you would scoff at a week’s work.
Also: if anybody wanted to kill you you’d be dead.
I know it’s a lot of fun to run down all the “thread actors” and the “tradecraft” they might use in your head on long, boring flights. But you’re not actually a movie character.
