Uber confirms hackers stole US drivers’ personal information in third-party breach

Detailed summary

Uber says hackers accessed personal information, including driver’s licence details, through third-party provider Fireworks AI.

Uber has confirmed a data breach involving thousands of US drivers after hackers accessed personal information stored with Fireworks AI, a third-party technology provider, including driver's licence details. The company is notifying affected individuals and offering free credit monitoring, but has not disclosed the total number of people affected nationwide.

The breach was reported to Uber on October 9, 2026, after Fireworks AI informed the company that an unauthorised party had compromised internal login credentials. The stolen credentials enabled the attacker to access Uber's account with the vendor and potentially reach records stored outside Uber's own systems.

Uber said it immediately severed data connections with the provider and launched an investigation. By October 13, investigators had confirmed that the attacker accessed Uber data, including personal information belonging to people now receiving breach notifications.

Also Read: US housing aid requires citizenship proof under new Trump administration rule

The notification letter sent to affected individuals is dated November 10.

State-level disclosures provide an initial picture of the incident's impact. Notices cited by Cyber Security News list 2,567 affected people in Massachusetts, 3,430 in South Carolina and approximately 1,873 in Rhode Island.

Together, the figures account for 7,870 people across the three states. The number does not represent the nationwide total, as additional notifications have been issued elsewhere.

TechCrunch reported that driver's licence information was among the compromised records, citing state filings. Uber also confirmed to the publication that Fireworks AI was the third-party vendor involved.

Also Read: California restaurant removes sign marking Nvidia’s founding after Jensen Huang exit

Opening of the article, excerpted from Hindustan Times. To read the rest, open the article on the publisher's site.