LOGO

Turo CEO on Data Breach: Background Checks Wouldn't Have Prevented Attack

January 3, 2025
Turo CEO on Data Breach: Background Checks Wouldn't Have Prevented Attack

Recent Incidents Involving Turo Rental Vehicles

This week saw two separate instances where rental vehicles, obtained through Turo – a peer-to-peer car-sharing service – were utilized in acts of violence.

Details of the Events

Initially, a former member of the military operating a Ford F-150 Lightning intentionally drove into a gathering of people, resulting in at least fifteen fatalities. Subsequently, an active-duty Green Beret rented a Tesla Cybertruck. The vehicle was positioned in front of the Trump International Hotel in Las Vegas, and reports indicate it was deliberately detonated. The individual responsible died by suicide.

Turo's Response

Andre Haddad, Turo’s CEO, released a statement on Friday expressing his outrage at the misuse of the platform by these two individuals. He affirmed that the company is diligently working to determine how such a scenario could have occurred.

The Core Question: Prevention

A central question arises: how could Turo, or any comparable platform, have effectively prevented these incidents?

Understanding the Turo Platform

Turo operates on a model similar to Airbnb, but for automobiles. It allows vehicle owners to generate income by renting out their cars, with some hosts managing fleets of three or more vehicles.

Turo's Safety Measures

The company states that it employs a “proprietary multi-layer, data-science-based trust and safety algorithm,” known as the Turo Risk Score, to screen potential renters. This score is constructed and refined using data from 50 internal and external sources.

The specifics of this system remain unclear – for example, whether standard criminal background checks are performed. Turo has not yet responded to inquiries from TechCrunch seeking further clarification.

Past Controversies

Historically, instances of individuals circumventing Turo’s screening processes have led to controversy, with vehicles being linked to human and drug trafficking operations. Hosts have also frequently reported on the Turo subreddit about renting to individuals with prior criminal records.

The Perpetrators' Backgrounds

Despite these concerns, Haddad indicated that both individuals involved in this week’s events – in New Orleans and Las Vegas – possessed valid driver’s licenses, had no criminal history, and were decorated veterans of the U.S. military.

“They could have utilized any form of transportation, secured accommodations at any hotel, or rented a vehicle from a traditional rental agency,” Haddad stated. “We do not believe any entity – including law enforcement – would have identified them as potential risks.”

Turo's Overall Safety Record

Turo reports having facilitated 27 million trips over the past 12 years, with serious incidents, such as vehicle theft, occurring in less than 0.10% of cases.

Future Steps for Turo

Looking ahead, Haddad mentioned that, in addition to enhancing its risk score algorithm, Turo has formed a team comprised of former law enforcement professionals to evaluate potential future risks.

“We are engaging with experts in national security and counterterrorism to gain insights and improve our ability to prevent similar occurrences in the future,” Haddad concluded.

#Turo#data breach#cybersecurity#Andre Haddad#background checks#attacker profiles