Hermes Vector

Tech

Uber Drivers' License Data Stolen in Fireworks AI Breach

Uber says hackers stole driver's license information from thousands of drivers through a breach at third-party provider Fireworks AI in October.

By Hermes Vector

Also in: Español · Português · Français · Deutsch · हिन्दी

Checked against 6 sourcesengadget.comscworld.comTechCrunchgbhackers.commashable.comyahoo.com
Illustration for: Uber Drivers' License Data Stolen in Fireworks AI Breach

In brief

  • Hackers stole driver's license information from thousands of Uber drivers through a breach at third-party provider Fireworks AI.
  • At least 7,870 drivers were affected across South Carolina, Massachusetts, and Rhode Island, with more states expected.
  • Uber is offering affected drivers free credit monitoring and fraud assistance through Cyberscout, a TransUnion company.
  • This is Uber's second known data breach of 2026, following an incident at its Uber Freight unit.

Uber Drivers' License Data Stolen in Fireworks AI Breach

Uber is notifying thousands of drivers that their personal information and driver's license details were stolen in an October data breach at a third-party technology provider, Fireworks AI.

What happened

Uber said it was notified on October 9 that hackers had stolen internal credentials from Fireworks AI and used them to access Uber's data stored with the provider. The company said it cut its data connections with the provider and began an investigation. By October 13, investigators confirmed the attacker had accessed Uber data, including personal information.

Who was affected

According to breach notices reviewed by TechCrunch, driver's license information was exposed for:

  • 3,430 people in South Carolina
  • 2,567 people in Massachusetts
  • 1,873 people in Rhode Island

That totals at least 7,870 people across three states. Uber also notified drivers in California and Illinois, but has not said how many were affected in those states. The company has not disclosed the total number of drivers affected nationwide, and said the number is expected to rise as more notifications arrive.

What was stolen and what Uber is doing

The stolen data includes driver's license details. Uber said it found no evidence that the stolen information had been misused when the notification letters went out. The company is offering affected drivers free credit monitoring and fraud assistance through Cyberscout, a TransUnion company, with enrollment available within 90 days of the letter's date.

About the breach

Fireworks AI is a cloud platform that gives clients access to open-source AI models. The company attributed the intrusion to a financially motivated cybercriminal group that seeks to sell stolen tokens used to access large language models. No known cybercriminal group has claimed responsibility for the attack. The productivity startup Notion also confirmed its data was stolen in the Fireworks hack.

This is Uber's second known data breach this year. Earlier in 2026, the company reported a security incident at its Uber Freight unit, for which an extortion gang took credit for stealing data.


Sources

This article was drafted with AI assistance and checked against the sources above. Company claims are reported as claims. Cover image is AI-generated.

Questions readers ask

What happened in the Uber data breach?
Hackers stole internal credentials from third-party provider Fireworks AI and used them to access Uber's data, including driver's license details. Uber cut its data connections with the provider on October 9 and confirmed the attacker had accessed the data by October 13.
How many drivers were affected by the breach?
At least 7,870 drivers were affected across South Carolina, Massachusetts, and Rhode Island. Uber also notified drivers in California and Illinois but has not disclosed the specific numbers for those states or the total nationwide count.
Why did hackers target Fireworks AI?
Fireworks AI attributed the intrusion to a financially motivated cybercriminal group seeking to sell stolen tokens used to access large language models. No known group has claimed responsibility for the attack.
What assistance is Uber offering to affected drivers?
Uber is offering free credit monitoring and fraud assistance through Cyberscout, a TransUnion company. Affected drivers can enroll in this service within 90 days of receiving the notification letter.

The day's checked news, by email

One short email a day with the top stories. Free, and you can unsubscribe in one click.

Or follow for the latest news:

How do you feel about this story?

Comments 0

No comments yet. Start the discussion.