This is why cyber security training is so important for any business:
“The person who claimed responsibility for the hack told The New York Times that he had sent a text message to an Uber worker claiming to be a corporate information technology person. The worker was persuaded to hand over a password that allowed the hacker to gain access to Uber’s systems, a technique known as social engineering.”
This type of hack takes no special skills, experience, or prowess. This is a simple question sent to the right person who didn’t immediately find it odd. This is going to be a very expensive mistake for Uber.