Uber confirms driver data stolen in Fireworks AI breach
Uber is notifying drivers that their personal information and driver’s-license data were stolen in an October breach at Fireworks AI, a third-party provider that gives developers access to open AI models. Uber said it learned of the incident on October 9, after hackers broke into Fireworks’ systems, stole internal credentials and used them to access some Uber data.
The company has not disclosed the total number of affected drivers or customers, and the figure may grow as additional state notifications are filed. Current notices identify 2,567 affected individuals in Massachusetts, 3,430 in South Carolina and 1,873 in Rhode Island. Illinois reported that residents’ driver’s-license information was exposed but had not yet provided a number, while Uber also notified drivers in California without specifying how many were involved.
Fireworks has attributed the breach to a financially motivated cybercriminal group allegedly seeking to sell stolen tokens used to access large language models. No known group has publicly claimed responsibility. The incident is Uber’s second known data breach this year, following a separate attack involving its Uber Freight division.
Continue in the app — vote & join in ➔