Uber has confirmed a data breach involving the personal information of thousands of U.S. drivers after hackers accessed records held by Fireworks AI, a third-party technology provider.
The exposed information includes driver’s license details. Uber is notifying affected people, but it has not disclosed the total number impacted nationwide.
The incident became known to Uber on October 9, 2026, when its service provider reported that an unauthorized party had compromised internal login credentials. Those credentials allowed the attacker to access Uber’s account with the provider, creating a path to personal records stored outside Uber’s own systems.
Uber said it immediately cut its data connections with the provider and opened an investigation. On October 13, investigators confirmed that the attacker had accessed Uber data, including personal information belonging to people now receiving breach notices. The notification letter is dated November 10, 2026.
Stolen Credentials Exposed Driver Records
State notices show that the breach affected 2,567 people in Massachusetts, 3,430 in South Carolina, and approximately 1,873 in Rhode Island. Together, those figures cover 7,870 people across three states. Additional notifications involve other states, meaning this count does not represent the full scale of the breach.
The public California notice leaves the exposed data fields blank rather than listing specific information. However, state filings reviewed by TechCrunch identified driver’s license information among the stolen records. The available evidence concerns drivers and should not be read as confirmation that all Uber riders or accounts were affected.
An Uber spokesperson confirmed to TechCrunch that Fireworks AI was the vendor involved. Cyber Security News previously covered the wider Fireworks AI data breach, which exposed customer records and some datasets. However, those broader findings do not establish which additional data, if any, belonged to Uber.
The same provider also handled data involved in the Notion AI chat transcript breach. Notion said fewer than 1% of customer workspaces were affected and that its own systems were not breached. These separate disclosures show how one provider’s security incident can expose information belonging to several customers.
Protection for Affected Drivers
Uber’s official breach notice says it had not identified misuse of the affected information when the letter was issued. The company is offering free credit monitoring and fraud assistance through Cyberscout, a TransUnion company. Recipients must enroll within 90 days of the letter’s date using their activation code.
Affected drivers should review their individual letters, check account statements, and report suspicious activity. Uber also recommends considering fraud alerts or credit freezes. The Federal Trade Commission explains that a credit freeze limits access to credit reports, making fraudulent new accounts harder to open.
