Ryde e-scooter company suffers data breach affecting all customer accounts
The Norwegian electric scooter company Ryde has confirmed a data breach affecting all of its customer accounts. The incident, which occurred on Sunday, 2 August, involved an external party gaining access to and copying customer data from the company’s systems (Helsingin Sanomat, Yle).
Ryde reports that the breach exposed phone numbers, email addresses, dates of birth, and partial credit card numbers. In some cases, names and addresses were also compromised. Additionally, the perpetrator obtained information on customers’ payment history, including trip details, purchases, and payments (Helsingin Sanomat).
The company has stated that it does not store full credit card numbers, meaning customers do not need to cancel their cards. However, Ryde has warned that the stolen data could be used in phishing attempts, urging customers to remain vigilant. The company emphasised that it will never request passwords, credit card details, or security codes, nor will it send messages containing login links (Helsingin Sanomat).
Following the breach, Ryde blocked the perpetrator’s access to its systems and has notified both the Norwegian data protection authority and the police (Yle).
In Finland, Ryde operates in several cities, including Helsinki, Espoo, Vantaa, Tampere, Turku, and Oulu (Helsingin Sanomat).