Uber has confirmed that hackers stole personal information and driver’s license records belonging to thousands of its U.S. drivers following a cyberattack involving third-party AI provider Fireworks AI. The ride-hailing company began notifying affected individuals in November 2026 after discovering that compromised credentials had been used to access data stored with the provider.
According to a data breach notice filed with California’s attorney general, Uber was notified of the security incident on October 9 and subsequently disconnected its systems from the affected provider. An investigation confirmed on October 13 that an unauthorized party had accessed information belonging to Uber drivers.
Thousands of Drivers Affected Across Multiple States
State regulatory filings identified at least 7,870 affected individuals across Massachusetts, South Carolina, and Rhode Island. These included 2,567 Massachusetts residents, 3,430 South Carolina residents, and 1,873 Rhode Island residents whose driver’s license information was compromised.
Uber also notified affected drivers in California and Illinois, although the number of individuals involved in those states has not been disclosed. The company has not confirmed the total number of drivers affected nationwide.
An Uber spokesperson confirmed to TechCrunch that the incident involved Fireworks AI, which had access to certain company data. Uber said it had not identified evidence that the stolen information had been misused.
Fireworks AI Confirms Unauthorized System Access
Fireworks AI provides infrastructure that allows developers and businesses to access and deploy open AI models. The company acknowledged unauthorized access to some of its systems that resulted in the exposure of customer information.
In its security advisory, Fireworks disclosed that attackers had obtained account information, billing records, and portions of customer datasets. The company also reported a separate intrusion involving its cloud provider later in October.
Fireworks attributed the attacks to a financially motivated cybercriminal group involved in LLMJacking, a scheme that uses stolen credentials or access tokens to obtain unauthorized AI computing services. However, no hacking group has publicly claimed responsibility for the Uber data theft.
Fireworks also confirmed that online productivity platform Notion was affected by the October security incidents. Notion disclosed that attackers had obtained AI chat transcripts belonging to a small percentage of its customers.
Uber Offers Identity Protection Services
Uber is offering affected drivers complimentary credit monitoring and fraud assistance through Cyberscout, a TransUnion company. Eligible individuals have 90 days from the date of their notification letters to enroll in the service.
The incident is Uber’s second publicly reported security breach in 2026, following an August incident involving its Uber Freight logistics division. An extortion group previously claimed responsibility for stealing information from that business, although the two incidents have not been linked.
Featured image credits: Wikimedia Commons
For more stories like it, click the +Follow button at the top of this page to follow us.