Reference Library – England – Buckinghamshire
Uber has got rid of its chief security officer and announced that his team paid off hackers who stole data belonging to 57 million users. The ride-hailing app’s chief executive, Dara Khosrowshahi, said: “None of this should have happened, and I will not make excuses for it.” Former CSO, Joe Sullivan, presided over a loss of the names, email addresses and mobile phone numbers belonging to Uber drivers and passengers, according to Bloomberg. Mr Sullivan’s team then paid the hackers $100,000 to delete the data instead of notifying the victims. Uber’s former chief executive, Travis Kalanick, learned of the hack in 2016, according to Bloomberg – seven months before a shareholder revolt forced him to quit1 and replaced him with Mr Khosrowshahi. “At the time of the incident, we took immediate steps to secure the data and shut down further unauthorised access by the individuals,” said Mr Khosrowshahi. Uber says it does not believe its customers need to take any action.
Image: ‘None of this should have happened, and I will not make excuses for it,’ said Uber’s CEO
“We have seen no evidence of fraud or misuse tied to the incident,” says a help page on its site.
“We are monitoring the affected accounts and have flagged them for additional fraud protection.” Mr Khosrowshahi said the data had been stolen from a “third-party cloud-based service” – understood to be Amazon Web Services, which the attackers accessed using legitimate passwords stolen via coding website Github. “We subsequently identified the individuals and obtained assurances that the downloaded data had been destroyed”.
The chief executive, who joined the company in August, added in his statement: “You may be asking why we are just talking about this now, a year later. “I had the same question, so I immediately asked for a thorough investigation of what happened and how we handled it. “While I can’t erase the past, I can commit on behalf of every Uber employee that we will learn from our mistakes.”
Image: Details of the hack come as Uber fights against the loss of its London licence
The data breach comes as Uber looks to improve its image after bad publicity during the tenure of Uber’s founder Travis Kalanick, and the decision by transport bosses in London to take away its licence. Mr Kalanick was ousted as chief executive in June after an internal investigation concluded he had built a culture that allowed female workers to be sexually harassed and encouraged employees to push legal limits. Uber’s new boss said the company was now working with regulators on the breach and notifying drivers whose licence numbers were downloaded – as well as giving them credit monitoring and identity theft protection.
A review of its security is also taking place in conjunction with Matt Olsen, a former National Security Agency general counsel and cybersecurity expert.
Two security guards have been jailed after staging a 7 million fake robbery from their own cash-in-transit van outside Heathrow Airport. One of the pair was found several hours later tied up and left by a roadside, with the van abandoned and the cash missing in a bid to make it look like the two men were victims. Loomis employees Mohammad Siddique, 32, and Ranjeev Singh, 40, were each jailed for six-and-a-half years after they were found guilty of conspiracy to steal at Kingston Crown Court earlier in October.
Another man, Rafaqat Hussain, who helped Siddique and Singh organise the heist, and was said to be “at the heart of the conspiracy”, was sentenced for 10 years and three months after pleading guilty in September to helping stage the robbery, launder the money and commit burglary. The money has never been recovered. During the trial, prosecutor Sandip Patel QC said the “audacious theft” was worthy of a Hollywood script and “carefully planned and executed”.
“It was an audacious theft carefully planned and executed and you may think it would make a Hollywood movie script, they would call it the ‘Heathrow Heist’ if anyone wanted to write a script about it.”
How the heist unfolded
On March 14, a security van was loaded with 26 bags of cash belonging to Credit Suisse at the BA cargo depot at Heathrow Airport. Siddique drove it out of the security gates of the depot with Singh in the passenger seat. He then stopped the vehicle to allow Singh to take what was claimed to be a toilet break.
Siddique then drove off with the 7million in cash. Singh waited inside the toilet block for some time before raising the alarm. He claimed he could not contact anyone earlier as he had left his mobile phone in the vehicle.
The security van was later found abandoned with its engine still running in West View, Feltham, while Siddique was found a few hours later tied up and left by a roadside. When questioned by police he said he had been contacted weeks before the robbery by an unknown man at his home. He claimed the man threatened to burn his home down and forced him to take part in the plan.
Mobile phones revealed conspiracy links
Although Singh claimed he left his mobile phone in the van before it was driven off, it emerged he had a second phone all along, stored in his jacket pocket, which he used to speak to Siddique while he was in the toilet. Mobile phone data was also presented by the prosecution to the court to show that Siddique had been in contact with his co-conspirators on the day of the heist and was directly involved. Secret recordings made by a device planted by police in Hussain’s car caught him admitting “I had all the cash, 7 million” and also heard him boast that he could buy any car he wanted with the stolen cash.
He said: “Mate it was a job, I f****** robbed 7 million.
“I want to lie low, I could buy a Ferrari, I want to chill for about six months, buy a couple of houses, flip them and make a bit of money.”
Sentencing the pair at Kingston Crown Court, Judge Stephen John told Siddique and Singh they “must now pay the price” after playing “for high stakes”. He called the staged robbery “a sophisticated operation which involved meticulous planning and execution”, in which Siddique and Singh “played (their) parts to perfection”. The court heard there are more people involved in the case that have not been identified.
Prosecutor Sandip Patel QC said someone with inside information would have been involved, Hussain knew that Siddique and Singh had been “assigned the Credit Suisse run well before they were officially told at around 7.15am that morning” after calling Siddique at 5.42am to make it clear that would be the day of the heist. A further man, Garry Carrod, was jailed for three-and-a-half years after pleading guilty to conspiracy to commit burglary. He and Hussain, along with Hussain’s wife Razvana Zeib, both of Chadwick Road, Slough, organised a house they wanted to buy with their share of the 7 million to be ransacked in an attempt to bring down the price.
An 88-year-old woman was selling the house to fund a place in a care home, but after it was flooded and vandalised, with windows broken, her failure to tell insurers she was not living there at the time of the burglary meant they failed to pay out. Carrod, 34, from Taplow, Buckinghamshire, has 74 previous convictions, including one for conspiracy to steal vehicles with Hussain, who has 64 previous offences to his name. Hussain’s wife Zeib, 35, will be sentenced at a later date after she plead guilty to conspiracy to money launder and commit burglary.
Deemed to be one of the biggest robbery plots in British history, the pair who worked for cash handling company Loomis abused their positions in an attempt to make off in a security van loaded with 19 bags of cash, on March 14 this year.
Top stories from around Surrey
The pair were caught as the result of an investigation by the Metropolitan Police’s Flying Squad unit. CCTV recordings revealed shortly after the money was picked up at 8.30am, the van pulled over outside the security gates and Singh took a toilet break.
Former security guard Ranjeev Singh of Grampian Way, Slough both found guilty of conspiracy to steal (Image: Metropolitan Police)
However this was an unauthorised stop and against company protocols that deem any such stop to be called into the control centre so the van can be closely monitored. Siddique drove off on his own and, with the help of another man, unloaded the bags into a white transit van parked in West View, Feltham , where the security van was later found abandoned.
Former security guard Mohammad Siddique of Belgrave Road, Slough found guilty of conspiracy to steal (Image: Metropolitan Police)
A total of 19 bags of cash totalling 7m were missing from the vehicle. Siddique was found hours later, by a member of the public, his hands and ankles bound with cable ties and left on a service roads near the M40 in Buckinghamshire. Both men were arrested after Singh’s delay in alerting the control centre and Siddique’s inconsistent account of what happened.
When questioned by police as a victim, Siddique said he had been contacted weeks before by an unknown man who threatened to burn his house down.
Police reconstruction of how the 7m bags of Loomis cash would have looked (Image: Metropolitan Police)
However prosecution presented mobile phone data, from a cell found on Singh, which revealed it had been used to call Siddique during the time the cash was stolen. The phone analysis also revealed Rafaqat Hussain, 41, who previously pleaded guilty to conspiracy to steal, had been in regular contact with Singh on the day of the theft. Flying Squad detectives established Hussain had called a recovery driver at 9.24am on the day of the theft and the white Ford transit van had been taken to a nearby recycling centre where it was scrapped.
Hussain s wife Razvana Zeib was arrested and charged with conspiracy to commit money laundering after investigations revealed 900,000 had been transferred to a Pakistani bank account opened in her name.
Cash was allegedly swapped between vans in West View, Feltham (Image: Google)
Zeib, Hussain and another defendant, Gary Carrod, had organised for a house they wanted to buy with their share of the proceeds to be ransacked and burgled in an attempt to bring down the price. Siddique of Belgrave Road, Slough and Singh, of Grampian Way, Slough were both found guilty of conspiracy to steal. Rafaqat Hussain of Chadwick Road, Slough pleaded guilty to conspiracy to steal, conspiracy to burgle and conspiracy to commit money laundering at Kingston Crown Court on Monday September 11.
Hussain’s wife Razvana Zeib, 35, also pleaded guilty to conspiracy to burgle and conspiracy to commit money laundering at Kingston Crown Court on the same day.
Rafaqat Hussain of Chadwick Road, Slough pleaded guilty to conspiracy to steal, conspiracy to burgle and conspiracy to commit money laundering (Image: Metropolitan Police)
Gary Carrod, 34 of Nursery Road, Taplow, pleaded guilty to conspiracy to burgle at Kingston Crown Court on Monday September 11. Detective Chief Inspector Mark Bedford, of the Met s Flying Squad, said: Although this was an organised theft involving months of planning, it would not have been possible without the calculating and devious actions of Singh and Siddique who abused their positions to subvert the secure processes put in place to prevent this type of offence.
The pair attempted to present themselves as victims of a robbery even going so far as arranging for Siddique to be tied up and left by a motorway to be found by innocent members of the public.
However, a swift and thorough investigation by the Flying Squad uncovered their lies, led to their accomplices being identified and ensured their successful conviction at court.
Razvana Zeib, 35, pleaded guilty to conspiracy to burgle and conspiracy to commit money laundering (Image: Metropolitan Police)
Both men are now likely to receive substantial custodial sentences reflecting their calculated abuse of their employer’s trust and the value of the monies stolen. The money from Credit Suisse bank was bound for the Bank of Ireland.
Helen Shaw from the CPS added: “Ranjeev Singh, Mohammad Siddique and Rafaqat Hussain staged this theft to steal 7m which has still not been recovered, crafting a plan to make it appear that they were victims.
Gary Carrod, 34 of Nursery Road, Taplow, pleaded guilty to conspiracy to burgle (Image: Metropolitan Police)
Their elaborate plot quickly unravelled when inconsistencies in their story became apparent.
The prosecution used interrogation of mobile phone records and CCTV evidence to highlight the lies they told police, leading to today’s convictions.”
They will all be sentenced Wednesday October 18.
Keep up to date with the latest news from around the county via the free Get Surrey app.
You can set up your app to see all the latest news and events from your area, plus receive push notifications for breaking news.