Uber data breach confirmed: Driving licenses of thousands of drivers stolen by hackers, details inside
Uber says hackers accessed some of its data through third-party vendor Fireworks AI after stealing private access credentials.
Notices reportedly identify driving licences of around 7,870 people across Massachusetts, South Carolina and Rhode Island.
Uber says it cut off the affected data connection and is offering eligible drivers credit monitoring and fraud assistance.
Uber, a popular ride-booking service, has confirmed a data breach involving several drivers in the US. The details include personal data and driving licenses that were stolen last month. The breach reportedly happened at one of Uber’s tech service providers. According to a TechCrunch report, Uber said it was informed of a breach in which hackers stole private credentials used to access the company’s data on October 9. However, Uber began informing affected drivers about the personal data breach a few days ago.
The report added that the service provider affected by the breach was Fireworks AI. This company, that offer developers access to AI models for use, reported a breach in October 2026 where hackers stole their customer’s data such as AI datasets, billing details and more. Uber did not disclose the exact figures of customers and drivers affected by the breach. However, the ride-hailing app filed notices with many US attorneys general in this regard.
“The notices to drivers are in relation to a security incident impacting one of our third-party vendors, Fireworks.ai, which had access to some Uber data,” an Uber representative told the news outlet. “We are notifying you about this incident because our investigation concluded that your [of the recipient driver] personal information was among the information accessed,” the November 10 notice read.
Fireworks claimed their data was stolen by cybercriminals with the intent to steal tokens to access LLMs and benefit financially. As for the possible extent of the Uber data leak, TechCrunch reported the notices claimed driver's licenses of around 7,870 people across three states (Massachusetts, South Carolina and Rhode Island). However, figures for other states, such as California and Illinois, and a consolidated figure remain unstated.
This is the second Uber data breach this year. For the unaware, the company also faced a major data breach in 2016 that exposed data of 57 million users. Uber is said to have cut down the data connection (that could give hackers access to internal credentials, which they could have used to sneak into Uber accounts) immediately when it was informed of a breach last month.
By October 13, the company verified the unauthorised activity and offered affected users credit monitoring and fraud assistance via Cyberscout (a TransUnion company) as a complimentary service for a limited period. Uber’s notice said affected users must review their account statements and minor free credit reports and report the matter to relevant authorities if fraud or unusual activity is detected.