Uber Drivers' Personal Information Stolen in Third-Party Fireworks AI Data Breach
Uber has confirmed that a data breach at its third-party technology provider, Fireworks AI, resulted in the theft of personal information and driver’s license data belonging to thousands of Uber drivers. The incident was reported on October 9 after hackers used stolen internal credentials from the provider to access Uber's data. Affected individuals include residents across several U.S. states, including Massachusetts, South Carolina, Rhode Island, Illinois, and California. The breach at Fireworks AI was reportedly carried out by a financially motivated cybercriminal group aiming to sell tokens for accessing large language models (LLMs). This incident marks Uber's second significant security breach this year, following a previous attack on its Uber Freight unit. While the exact total number of affected drivers remains undisclosed, notifications are ongoing as more data becomes available.