Thousands of Uber drivers in the United States are being told that their personal and driver’s license information was stolen. The data was taken in an October breach at Fireworks AI, a third-party technology provider that held Uber records.
Uber disclosed the incident in breach notices filed with several state attorneys general, including California. According to a Cyber Security News report, an Uber spokesperson confirmed to TechCrunch that Fireworks AI was the vendor involved.
The company has not said how many people are affected nationwide. The notices seen so far concern drivers, and nothing in them shows that rider accounts were exposed.
Stolen Vendor Credentials Opened the Door
The attack did not breach Uber’s own systems. It ran through the vendor.
On October 9, 2026, the provider told Uber that an unauthorized party had compromised its internal credentials. The attacker used them to reach Uber’s account with the provider, where the personal records were stored.
Uber cut its data connections with the provider and began an investigation. On October 13, that investigation confirmed the attacker had accessed Uber data, including the personal information of the people now being notified.
Uber’s notification letter is dated November 10, about a month after the first alert. The California notice does not name the provider or list the data involved, Reuters reported.
Fireworks AI disclosed its own breach last month. In that incident, hackers took customer information, including billing data and some private AI datasets. It is not clear whether any other Uber data was part of that wider theft.
No known cybercriminal group has claimed the attack.
At Least 7,870 Drivers Affected in Three States
State filings reviewed by TechCrunch put the confirmed count at 7,870 people across three states. The stolen data includes driver’s license details.
| State | People notified |
|---|---|
| South Carolina | 3,430 |
| Massachusetts | 2,567 |
| Rhode Island | 1,873 |
The real total is higher. Uber has sent notices in other states as well, and the figure is expected to grow as more filings become public.
This is Uber’s second known breach of 2026. Earlier this year the company reported a security incident at its Uber Freight unit, which an extortion gang claimed.
The Fireworks AI compromise has reached other companies too. Notion said the same provider was behind an exposure of AI chat transcripts that affected fewer than 1% of its customer workspaces.
What Uber Is Offering Affected Drivers
Uber says it had found no misuse of the stolen information when the letters went out. It is offering free credit monitoring and fraud assistance through Cyberscout, a TransUnion company.
Drivers who receive a letter should:
- Enroll in the monitoring service within 90 days of the letter’s date, using the activation code provided.
- Check bank and account statements for activity they do not recognize.
- Consider a fraud alert or a credit freeze, which makes it harder to open new accounts in their name.
- Treat unexpected calls, texts, or emails about the breach with caution, since stolen license data is often used in follow-up scams.
Driver’s license numbers are valuable to fraudsters because they help pass identity checks. Unlike a password, a license number cannot be quickly changed.
PentestPad with AI to Automate Pentesting – The pentest reporting platform built for security teams -> Try for free
