Uber driver license data stolen in Fireworks AI vendor breach
Original title: Uber Hacked – Hackers Steal Drivers’ License Personal Data
Filings list 7,870 people in three states so far; Uber reports no misuse and is offering Cyberscout monitoring.
Uber is notifying US drivers that personal and driver's license information was stolen from Fireworks AI, a vendor that stored Uber records. On October 9, 2026, the provider said stolen internal credentials were used to reach Uber's account; Uber confirmed access on October 13 and dated notification letters November 10. Notices seen so far concern drivers, not rider accounts. Fireworks AI separately disclosed theft of customer billing data and some private AI datasets; Notion tied the same provider to exposed AI chat transcripts.
Unconfirmed: The nationwide total is undisclosed, and it is unclear whether other Uber data was in Fireworks AI's wider theft.
- South Carolina notices cover 3,430 people, Massachusetts 2,567 and Rhode Island 1,873.
- Uber has not given a nationwide total, and more state filings are expected.
- Reuters reported the California notice does not name the provider or data types.
- No known cybercriminal group has claimed the attack.
- This is Uber's second known 2026 breach after an Uber Freight incident.
Impact: Driver license details and personal data of Uber drivers
- 1.Enroll in Cyberscout monitoring within 90 days using the letter's activation code.
- 2.Check bank and account statements for activity you do not recognize.
- 3.Consider a fraud alert or credit freeze, and treat unexpected breach contacts cautiously.
- ATT&CK
- T1078 Valid Accounts
- Vendors
- Fireworks AI
- Organizations
- CyberscoutTransUnion
- Countries
- United States
From the original article
2 min read at gbhackers.com
Thousands of Uber drivers in the United States are being told that their personal and driver’s license information was stolen. The data was taken in an October breach at Fireworks AI, a third-party technology provider that held Uber records. Uber disclosed the incident in breach notices filed with several state attorneys general, including California.
By Balaji · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.