{"slug": "uber-drivers-license-details-stolen-in-major-data-breach-thousands-affected-us", "title": "Uber Drivers' License Details Stolen in Major Data Breach. Thousands Affected Across US.", "summary": "Hackers stole personal information and driver's license details of at least 7,870 Uber drivers across three states after obtaining internal credentials at third-party AI provider Fireworks AI, according to regulatory breach filings reported by Reuters and TechCrunch. The affected drivers include 3,430 in South Carolina, 2,567 in Massachusetts and 1,873 in Rhode Island, with additional drivers in California and Illinois notified but uncounted; Uber said it was notified on Oct. 9 and severed connections with the compromised provider, and by Oct. 13 investigators confirmed stolen credentials had accessed personal data. Fireworks attributed the intrusion to a financially motivated cybercriminal group seeking access tokens used to interact with large language models, and the incident also compromised information at Notion.", "body_md": "# Uber Drivers’ License Details Stolen in Major Data Breach. Thousands Affected Across US.\n\n## Hackers accessed driver information through third-party AI provider Fireworks, with regulatory filings confirming thousands of affected individuals across several states.\n\nUber has confirmed that hackers stole the personal information and driver's license details of thousands of U.S. drivers after breaking into the systems of a third-party technology provider, exposing sensitive records belonging to people working for the ride-hailing company.\n\nAt least 7,870 individuals were affected across three states, according to regulatory filings, although the nationwide total remains unknown. The breach originated at Fireworks AI, a technology company that provides access to artificial intelligence models and services, rather than through a direct attack on Uber's own systems.\n\nThe incident occurred in October but came to wider public attention Friday after Uber began notifying affected drivers and filing breach disclosures with state regulators.\n\nUber told [TechCrunch](https://techcrunch.com/2026/11/13/uber-confirms-hackers-stole-thousands-of-drivers-license-information-in-data-breach/?utm_source=chatgpt.com) that the notifications were connected to a security incident at Fireworks AI, which had access to some of the company's data.\n\nThe affected individuals include 3,430 residents of South Carolina, 2,567 in Massachusetts and 1,873 in Rhode Island. Additional drivers in California and Illinois were also notified, but the number affected in those states has not been confirmed.\n\nThe confirmed figures from the three states place the number of affected individuals at nearly 8,000, with further notifications potentially increasing the total.\n\nUber said the breach began when an unauthorized party obtained internal credentials belonging to its service provider and used them to access data associated with Uber's account.\n\nThe company was notified of the incident on Oct. 9 and subsequently severed its connections with the compromised provider while investigating the unauthorized access.\n\nBy Oct. 13, investigators had determined that the stolen credentials had been used to access information containing personal data, according to breach notifications reviewed by [Reuters](https://www.reuters.com/business/uber-says-us-drivers-license-data-stolen-data-breach-2026-11-13/?utm_source=chatgpt.com).\n\nThe notifications did not initially identify the affected technology provider. TechCrunch subsequently identified Fireworks AI, a company whose platform allows developers and businesses to run and access artificial intelligence models.\n\nAn Uber spokesperson confirmed the connection to Fireworks, saying the incident involved a third-party vendor that had access to some Uber information.\n\nFireworks separately acknowledged unauthorized access to parts of its systems that affected customer data. The company had previously disclosed a security incident involving stolen customer information, including billing records and certain private AI datasets.\n\nThe breach also affected Notion, the workplace productivity platform, which confirmed earlier that some of its information had been compromised in the Fireworks incident.\n\nFireworks attributed the intrusion to a financially motivated cybercriminal group interested in stealing and selling access tokens used to interact with [large language models](https://www.ibtimes.com/hackers-tamper-ai-chatbots-misinformation-research-3809208). However, no known hacking group has publicly claimed responsibility for the attack.\n\nThe theft of driver's license information is particularly concerning because the records can contain identifying details that may be used in identity fraud. Unlike passwords, which can be changed after a security incident, government-issued identification numbers are more difficult to replace.\n\nUber has not disclosed the full range of personal information exposed or the total number of drivers affected nationwide.\n\nThe company said it has found no evidence that the stolen information has been misused, according to Reuters.\n\nAffected individuals are being offered free credit monitoring and fraud assistance through Cyberscout, a TransUnion service. They have 90 days from the date of their notification letter to enroll.\n\nUber has not indicated whether additional drivers will receive notifications as its investigation continues.\n\nThe incident also highlights the [security challenges](https://www.ibtimes.com/vast-majority-cyber-attacks-now-involve-ai-report-shows-3808570) companies face when sharing sensitive information with outside technology providers. Businesses increasingly rely on [third-party platforms](https://www.ibtimes.com/ai-software-supply-chain-becoming-more-dangerous-traditional-one-3808933) to handle computing, data processing and AI-related operations, giving those providers access to information beyond their own customer records.\n\nIn this case, [compromised credentials](https://www.ibtimes.com/polymarket-international-trading-halt-software-breach-3809178) at a single technology provider enabled unauthorized access to information belonging to more than one company.\n\nThe attack is Uber's second publicly reported security incident this year. Earlier in 2026, the company's Uber Freight division was affected by a separate breach, with an extortion group claiming responsibility for stealing information.\n\nUber has experienced other [major cybersecurity incidents](https://www.ibtimes.com/binance-hack-trusted-devices-crypto-security-3809198), including a 2022 attack in which a hacker gained access to internal systems after compromising an employee's credentials.\n\nThe latest breach has prompted notifications across several U.S. states, but the number of affected drivers could rise as additional regulatory filings become available.\n\nFor drivers receiving notices, Uber's disclosure provides instructions on accessing identity protection services and monitoring their personal information for suspicious activity.\n\n© Copyright IBTimes 2026. All rights reserved.", "url": "https://wpnews.pro/news/uber-drivers-license-details-stolen-in-major-data-breach-thousands-affected-us", "canonical_source": "https://www.ibtimes.com/uber-driver-data-breach-fireworks-ai-3809743", "published_at": "2026-11-13 19:05:09+00:00", "updated_at": "2026-11-13 19:52:33.928151+00:00", "lang": "en", "topics": ["ai-safety", "large-language-models", "artificial-intelligence"], "entities": ["Uber", "Fireworks AI", "Notion", "Reuters", "TechCrunch", "South Carolina", "Massachusetts", "Rhode Island"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/uber-drivers-license-details-stolen-in-major-data-breach-thousands-affected-us", "markdown": "https://wpnews.pro/news/uber-drivers-license-details-stolen-in-major-data-breach-thousands-affected-us.md", "text": "https://wpnews.pro/news/uber-drivers-license-details-stolen-in-major-data-breach-thousands-affected-us.txt", "jsonld": "https://wpnews.pro/news/uber-drivers-license-details-stolen-in-major-data-breach-thousands-affected-us.jsonld"}}