Uber confirms driver data breach after Fireworks AI credential compromise
Original title: Uber Confirms Data Breach – Hackers Stole Users’ Personal Information
State notices cover 7,870 people in three states; Uber has not disclosed a nationwide total.
Uber confirmed that an unauthorized party used compromised login credentials at Fireworks AI to reach Uber driver records held by the provider. Uber learned of the incident on October 9, 2026, cut data connections, and confirmed access on October 13. Notices dated November 10 say driver's license details were among the exposed information. Uber had not identified misuse when the letters went out and is offering credit monitoring.
Unconfirmed: Uber has not disclosed the nationwide total, and no misuse had been identified when notices were issued.
- Massachusetts, South Carolina, and Rhode Island notices cover 2,567, 3,430, and about 1,873 people.
- Uber says the evidence concerns drivers, not confirmation that all riders were affected.
- Recipients must enroll in Cyberscout monitoring within 90 days of the November 10 letter.
- A separate Fireworks AI incident also involved Notion AI chat transcripts.
Impact: driver personal information, including driver's license details
- 1.Enroll in free Cyberscout credit monitoring within 90 days of the November 10 letter.
- 2.Review account statements and report suspicious activity.
- 3.Consider placing fraud alerts or credit freezes.
- ATT&CK
- T1078 Valid Accounts
- Victims
- Uber
- Organizations
- Fireworks AI
- Countries
- United States
From the original article
2 min read at cybersecuritynews.com
Uber has confirmed a data breach involving the personal information of thousands of U. S. drivers after hackers accessed records held by Fireworks AI, a third-party technology provider.
By Guru Baran · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.