# Ryde Data Breach: 1.6 Million Norwegian Accounts Compromised All Ryde customers are affected by the August 2, 2026 data breach. Here's what was stolen, what's safe – and how to avoid scams that follow. Canonical: https://samfunnprep.no/en/nyheter/ryde-datainnbrudd-2026 Language: en Publisher: SamfunnPrep Author: Hlib Suslov Published: 2026-08-07T15:42:01.081+00:00 Modified: 2026-09-18T12:37:44.788128+00:00 AI use policy: https://samfunnprep.no/ai-policy.txt ## Key takeaways - 4.5 million accounts, 1.6 million in Norway The breach in the early hours of August 2, 2026 affected all Ryde customers in Norway, Sweden, Finland, and Germany. - Birth date, contact details, and payment history Also the first six and last four digits of cards are compromised, but not full card numbers or where you have ridden. - Scams can sound credible With the correct amount, date, and card digits, scammers can sound real, but neither Ryde nor your bank ask for codes or BankID. The e-scooter company Ryde was hit by a data breach in the early hours of Sunday, August 2, 2026. All customer accounts are affected: around 4.5 million across four countries, including 1.6 million in Norway. Birth dates, phone numbers, email addresses, and payment histories have been compromised. ## What happened in the Ryde data breach Unauthorized parties gained access to Ryde's systems in the early hours of Sunday, August 2, and copied information for all customers. The breach was discovered the same morning, and access was closed shortly after. Ryde rents e-scooters in Norway, Sweden, Finland, and Germany, and is one of the largest operators in Norway. If you ride such scooters, you should also know the [rules for e-scooters in Norway](https://samfunnprep.no/en/articles/sykkel-og-elsparkesykkel-regler-norge). The company says it has closed the breached systems, rebuilt the affected systems from scratch, and changed passwords and encryption keys. The incident has been reported to police and the Data Protection Authority (Datatilsynet), and customers have been notified directly. Chief Executive Tobias Balchen told news agency NTB that the company does not know who is behind the attack and that there have been no ransom demands or threats. However, Ryde cannot guarantee that the information has not been sold on. ## What information has been compromised? These are the pieces of information Ryde confirms were copied: - mobile number and email address - birth date - the **first six and last four digits** of payment cards - payment history for rides, purchases, and fees - name and address for a small number of customers (unverified information) These are **not** compromised: full card numbers, which are held by an external payment provider and not by Ryde. The company also states there is no evidence that your ride history – where you have ridden – has been extracted. The only location information affected is where your account was created. ## Why are "just a few digits" dangerous? The danger lies in the combination, not in the card number alone. The first six digits show which bank issued the card. The last four digits are exactly the numbers banks and shops use to confirm your identity in a conversation. Add a genuine payment history, and a scammer can call you, reference a ride you actually took – with the correct amount, date, and card digits – and sound completely credible. Ryde warns about this itself. The rule that stops such attempts is the same, no matter how much the caller knows about you: neither Ryde, your bank, nor police ask for passwords, one-time codes, or BankID (your digital ID), and they never ask you to log in via a link in SMS or email. On SamfunnPrep you can find a guide to [seven common scam tricks in Norway](https://samfunnprep.no/en/articles/svindel-slik-gjenkjenner-du-norge) and a separate guide on [BankID scams and phone pressure](https://samfunnprep.no/en/articles/bankid-svindel-norge). ## What should you do now? 1. **Don't click links** in SMS or email that appear to come from Ryde or your bank. Open the app instead, or type the web address yourself. 2. **Hang up** if someone calls asking for codes. Call your bank back using a number you find yourself. 3. **Review your bank statements** over the coming months, and notify your bank immediately of any unfamiliar transactions. 4. **Consider a credit freeze.** Birth date, name, and address are enough to attempt identity theft – see how you [set up a credit freeze against identity theft](https://samfunnprep.no/en/articles/kredittsperre-id-tyveri-norge). You don't need to change your password in the Ryde app or freeze your bank card, according to the company itself. ## What does the Data Protection Authority say? The Data Protection Authority (Datatilsynet) has received a breach report from Ryde and is investigating the matter. "We have received a breach report from Ryde and are reviewing it," says Senior Adviser Eirik Gulbrandsen. The authority says it is primarily concerned with the follow-up of those affected, and then with what actually happened. Under the General Data Protection Regulation (GDPR) Article 33, a business must report such breaches to the Data Protection Authority "without undue delay and, where possible, no later than 72 hours" after the breach is discovered. Article 34 requires that those affected are notified directly when the risk is high. The notification must describe the breach, the likely consequences, and the measures being taken. As someone affected, you have two specific rights: access to see what information Ryde holds about you, and the right to file a complaint with the Data Protection Authority. The complaint form requires login with ID-porten; if you don't have that, you can send your complaint by letter to the Data Protection Authority, Postboks 458 Sentrum, 0105 Oslo. Processing time is on average around one year. SamfunnPrep has a separate article on [access, correction, and deletion under GDPR](https://samfunnprep.no/en/articles/datatilsynet-gdpr-innsyn-sletting). ## FAQ ### Am I affected by the Ryde data breach? Ryde says that all who have a customer account are affected. This applies to around 4.5 million accounts in Norway, Sweden, Finland, and Germany, of which 1.6 million are registered in Norway. ### Do I need to freeze my bank card? No. Ryde says you do not need to freeze your card. Only the first six and last four digits are compromised, while full card numbers are held with an external payment provider. ### Can anyone see where I rode with Ryde? No. Ryde says there is no evidence that ride history or location data has been extracted. The only location information affected is where your account was created. ### What should I do if someone calls saying they're from Ryde or my bank? Hang up and call back using a number you find yourself. Neither Ryde nor your bank ask for passwords, one-time codes, or BankID, and they never ask you to log in via a link in SMS or email. ### Can I complain about my information being compromised? Yes. You can request access to information Ryde holds about you, and you can file a complaint with the Data Protection Authority. The complaint form requires ID-porten, and you can also complain by letter. Processing time is on average around one year. ### Who is behind the Ryde data breach? It is not known. Chief Executive Tobias Balchen says the company has no indication of who is behind it, and that there have been no ransom demands. The matter has been reported to police. ## Sources - [Security Incident August 2026](https://www.ryde-technology.com/security-incident-2026-08-02) - [4,5 millioner Ryde-kontoer i flere land rammet av datainnbruddet](https://www.digi.no/artikler/4-5-millioner-ryde-kontoer-i-flere-land-rammet-av-datainnbruddet/575471) - [Datatilsynet undersøker dataangrepet mot Ryde](https://www.digi.no/artikler/datatilsynet-undersoker-dataangrepet-mot-ryde/575489) - [Datainnbrudd hos Ryde: – Alle kundekontoer er berørt](https://www.vg.no/nyheter/i/PdO7nJ/datainnbrudd-hos-ryde-alle-kundekontoer-er-beroert) - [Informasjon til de berørte](https://www.datatilsynet.no/rettigheter-og-plikter/virksomhetenes-plikter/avvik/ma-si-fra-til-berorte/) - [Klage til Datatilsynet](https://www.datatilsynet.no/om-datatilsynet/kontakt-oss/klage-til-datatilsynet/) - [Personvernforordningen artikkel 33 og 34](https://lovdata.no/dokument/NL/lov/2018-06-15-38/KAPITTEL_gdpr-4-2) Citation: Hlib Suslov, "Ryde Data Breach: 1.6 Million Norwegian Accounts Compromised", SamfunnPrep, 2026-08-07T15:42:01.081+00:00, https://samfunnprep.no/en/nyheter/ryde-datainnbrudd-2026