Electric scooter company Ryde has confirmed that a data breach has affected all of its customer accounts, or roughly 4.5 million people across Norway and other European markets.
The company said an unauthorised party accessed its systems on August 2 and copied customer information before Ryde blocked the intrusion.
Ryde operates in Norway, Sweden, Finland, and Germany. It said it does not yet know who carried out the attack.
Contact and payment-related data exposed
The Ryde data breach exposed several categories of personal information linked to customer accounts.
According to the company, the stolen data includes:
- Phone numbers
- Email addresses
- Dates of birth
- Partial payment card numbers
- Payment history details
The company said the attacker did not access full payment card numbers because its payment provider stores that information.
Ryde also said customers do not need to block their cards or take action on their accounts at this stage.
Ride history was not taken
The company said no detailed location information or ride history was extracted.
Apart from the location where a customer created an account, Ryde found no indication that the attacker accessed data showing where people travelled.
That limits the privacy impact compared with a breach involving full trip histories. However, the exposed details could still be valuable to scammers.
A combination of names, contact information, dates of birth, partial card numbers, and real payment history can make a fraudulent message appear far more convincing.
Customers warned about phishing attempts
Ryde has warned users to watch for phishing and fraud attempts following the breach.
Criminals may refer to a genuine payment or pretend to contact customers about an account issue, refund, password reset, or card verification. Because the attackers may hold real payment-related details, these messages could look more credible than generic spam.
Ryde urged users not to share passwords, one-time banking codes, or BankID credentials with anyone who contacts them.
The company said neither Ryde nor a bank would ask customers to provide that information through an unsolicited email, call, or message.
Large breaches can fuel future fraud
The Ryde data breach shows how stolen account information can support fraud long after attackers leave a compromised system.
Threat actors can use the data to send fake password-reset emails, impersonate customer support, create fraudulent payment requests, or attempt account recovery attacks. They can also combine new information with data from earlier breaches to build more detailed victim profiles.
Users should independently verify any unexpected message by opening the Ryde app or visiting the company’s official website directly. They should avoid clicking links in emails or text messages that ask for urgent action.
Ryde said it continues to investigate the incident and monitor its systems.
0 responses to “Ryde Data Breach Affects 4.5 Million Scooter App Accounts”