Uber Data Breach: Thousands of Drivers’ License Information Exposed in Cyberattack

19:00

Uber has disclosed a cybersecurity incident that exposed sensitive personal information belonging to thousands of drivers in the United States, raising fresh concerns about the security risks associated with third-party technology providers.

The ride-hailing company is notifying affected individuals after hackers reportedly obtained internal access credentials from one of its external technology partners and used them to reach data connected to Uber.

Fireworks AI Identified as the Source of the Security Incident

The incident came to light after Uber was alerted on October 9, 2026, by its service provider that unauthorized individuals had infiltrated its systems and stolen internal credentials. Those credentials subsequently enabled the attackers to access information associated with Uber.

The provider has been identified as Fireworks AI, a technology company that offers developers access to open-source artificial intelligence models.

Fireworks AI had previously disclosed a security incident involving the theft of customer information, including billing-related records and certain private datasets used in artificial intelligence development. Productivity platform Notion also confirmed that some of its information had been compromised in the same incident.

Uber acknowledged that the affected provider had access to a portion of its data. The company subsequently began contacting drivers whose personal information may have been involved.

Thousands of Drivers Affected Across Several States

Regulatory disclosures in the United States provide an initial indication of the scale of the incident.

Available notifications identify 2,567 affected individuals in Massachusetts, 3,430 in South Carolina and 1,873 in Rhode Island. These figures alone account for nearly 7,900 people.

Additional disclosures concern residents of Illinois, although the precise number has not yet been established. Uber has also notified individuals in California without publicly specifying how many people were affected there.

The figures therefore represent only the currently identified cases rather than a definitive nationwide total. Further notifications could reveal a broader impact as the investigation and disclosure process continue.

The compromised information includes drivers’ license details, making the incident particularly concerning because such records contain sensitive identification information that could potentially be exploited for fraudulent activities.

Cybercriminals Targeting Artificial Intelligence Credentials

The Fireworks AI incident appears to have been driven by financial motives. According to information disclosed about the attack, the cybercriminals were seeking to obtain access tokens associated with large language models, which can subsequently be traded or sold.

The identity of the individuals or group responsible for the theft has not been publicly established, and no known cybercriminal organization has claimed responsibility.

The incident highlights an increasingly important challenge for technology companies: protecting sensitive information not only within their own infrastructure but also across the external platforms and service providers connected to their operations.

Even when a company's core systems remain protected, compromised credentials belonging to a third-party partner can create an alternative route into confidential information.

Another Cybersecurity Challenge for Uber

This latest disclosure represents Uber's second publicly known data security incident in 2026.

Earlier in the year, the company's Uber Freight division, which specializes in freight transportation and logistics, was also affected by a security incident. A cyber-extortion group subsequently claimed responsibility for stealing information connected to that business.

Although the two incidents involve different circumstances, their occurrence within the same year places additional attention on the company's cybersecurity arrangements and the protection of information throughout its business operations.

For affected drivers, the immediate concern is the potential misuse of their identification details. The incident also reinforces the importance of stronger access controls, closer oversight of external technology partners and effective security measures to prevent compromised credentials from exposing sensitive customer information.