An Uber customer in Philadelphia had her account charged over $28,000 in what the company described as a “glitch” that affected a “handful” of its customers.
One woman said her bank flagged a charge of $28,639 from the taxi hire company earlier this month, with Uber revealing that she was one of a small number of customers affected, adding that its engineers are working to ensure it doesn’t happen again.
At first, Uber told the woman her account had been hacked, sending her an email to say that it appeared to have been the target of a “highly sophisticated” form of fraud.
The San Francisco-based company then emailed a week later to say that the account hadn’t actually been compromised after all.
“Your information is safe, and the charge that appeared on your credit card statement was an unusually large authorization hold,” Uber wrote. “This was never processed as a payment, and our engineering team has been made aware of this error.”
READ MORE: 'Stalk an ex or look up anyone': Weak Uber security allowed spying on riders – report
The company uses an authorization hold on an account to confirm a payment method from a customer. In this case, the glitch caused the authorization amount to be much greater than usual.
Uber has recently come under fire for overcharging customers with its “upfront” fees, with service users reportedly charged for journeys as much as double the distance they traveled. According to reports, the drivers received their normal fee, while the company pocketed the rest.
The company told Fortune that the automated system sometimes overestimates the journey and as the drivers are paid based on how far they actually drive, they don’t get to keep the difference in fares.
While Uber has said the Philadelphia glitch was not a hack, companies with a wealth of customer information online have become a target for cyber-attacks, Philly.com reports.
READ MORE: Europe’s highest court to decide what is Uber
In March 2015, hackers were reportedly selling Uber customer account information on the dark web, which allowed buyers to access other people’s Uber accounts and take rides for as little as $1.
In 2014, as many as 50,000 Uber drivers also had their personal details leaked online.