A new Uber data breach has exposed thousands of drivers’ license details after hackers used stolen credentials at an outside technology company to access sensitive information connected to the ride-sharing giant. Uber is now notifying affected drivers about the October cyberattack, with at least 7,870 people identified across three states alone. The company has not disclosed how many individuals were impacted nationwide.
According to state breach notifications, 3,430 people in South Carolina, 2,567 in Massachusetts, and 1,873 in Rhode Island had their information compromised. Illinois also reported affected residents, although the number remains pending. California drivers received notifications, too, but an exact figure has not been made public.
The Uber data breach dates back to October 7, when hackers gained unauthorized access through compromised credentials belonging to one of the company’s outside providers.
Uber learned about the situation on October 9 and immediately disconnected its data connections with the provider while launching an investigation. By October 13, investigators confirmed that the stolen credentials had been used to access information belonging to individuals connected to Uber.
The outside company involved is Fireworks AI, a technology provider that helps developers access and operate artificial intelligence models.
An Uber spokesperson confirmed the connection in a statement to TechCrunch, saying, “The notices to drivers are in relation to a security incident impacting one of our third-party vendors, Fireworks.ai, which had access to some Uber data,”
The Uber data breach happened through a company that already had access to certain Uber records. Hackers reportedly exploited stolen credentials at the vendor rather than breaking directly into Uber’s main platform.
Made to order and shipped to your door.
For drivers who depend on Uber to make money, the stolen information creates another headache. Driver’s license details are sensitive personal records that can potentially be used for identity theft and other fraudulent activity.
Fireworks AI has acknowledged unauthorized access to its systems. In a November 9 security update, the company revealed that attackers accessed certain customer account details, billing information, stored credentials, and private datasets.
The company said payment card numbers were not compromised because Fireworks does not store that information.
Fireworks also disclosed additional unauthorized activity on October 24 involving development systems hosted by another cloud provider. The incident resulted in further customer data exposure. Fireworks brought in cybersecurity specialists from Palo Alto Networks Unit 42 to investigate and strengthen its security.
The Uber data breach is not the only fallout connected to Fireworks’ recent security problems.
Popular workplace platform Notion also confirmed that customer information was exposed in an incident involving the AI provider. Notion revealed that some AI chat transcripts were accessed, affecting fewer than 1% of its workspaces. Most of the exposed conversations were not directly labeled with identifying user or workspace information.
Meanwhile, Uber has not publicly confirmed whether additional categories of driver information were stolen beyond those identified in the available disclosures. The company also has not provided a nationwide count of affected people.
In its notifications, Uber said it had not identified evidence that the compromised information had been misused.
Still, the Uber data breach has prompted the company to offer affected individuals complimentary credit monitoring and fraud assistance through Cyberscout, a TransUnion company. Recipients have 90 days from the date of their notification letters to enroll.
Drivers receiving a notification should carefully review the information involved, monitor their credit reports, and watch for suspicious activity. They should also be cautious about unexpected emails or texts claiming to provide assistance with the breach.
Fireworks has linked its security incidents to a financially motivated cybercriminal group allegedly interested in selling unauthorized access to large language models. However, no publicly identified hacking group has claimed responsibility for stealing the Uber information.
This is also not Uber’s first reported cybersecurity problem in 2026. In August, its Uber Freight division confirmed unauthorized access to part of its systems after an extortion group called Helix claimed to have stolen company files. Uber Freight did not verify the group’s claims about the stolen material.
With the latest Uber data breach now affecting thousands of drivers, the nationwide number of victims remains unknown. Additional state filings could reveal a significantly larger group of people whose personal information was exposed.
