Uber ignores security breach for half a year.
Uber sues third party while trying to repair damage caused by their own failings.
At this point the identity of the hacker is irrelevant. The data is in the wild, Uber is exposed as incompetent (again). But hey, anyone want to invest another billion at a 40 billion valuation? This company is going places.
The third party being sued is the (as yet unidentified) person who used the key to obtain & leak the data.
No. Even if I leave my door unlocked, someone who comes in and steals my stereo should still be punished.
> ...and then your [sic] mad at the manufacturer of the door's lock.
There is no evidence that Uber is mad at Github.
Instead Uber wants all github's access log data for the gist in question which sounds like more incompetence and desperation on Uber's part.
Which is why we have courts.
which could be the audience they're most concerned about.
Your analogy is wrong. It's more like asking someone to protect the key of your locked door. And they make copies and leave them in random places with the address attached.