In its update, Uber stated that the Lapsus$group is responsible for hacking the company's systems. According to Uber's investigation, it appears that the attacker did not make any internal changes, nor did it access any customer or user data. Instead, the attacker downloaded internal Slack messages, downloaded information from an internal tool, and accessed the company's dashboard at HackerOne. Uber stated that any bugs and vulnerabilities were remediated, while customer support operations have also been brought back to normal. The company is still investigating the incident and is working on strengthening its policies and practices against such attacks.