Uber Drivers’ License Details Stolen in Major Data Breach. Thousands Affected Across US.

Uber has confirmed that hackers stole the personal information and driver's license details of thousands of U.S. drivers after breaking into the systems of a third-party technology provider, exposing sensitive records belonging to people working for the ride-hailing company.

At least 7,870 individuals were affected across three states, according to regulatory filings, although the nationwide total remains unknown. The breach originated at Fireworks AI, a technology company that provides access to artificial intelligence models and services, rather than through a direct attack on Uber's own systems.

The incident occurred in October but came to wider public attention Friday after Uber began notifying affected drivers and filing breach disclosures with state regulators.

Uber told TechCrunch that the notifications were connected to a security incident at Fireworks AI, which had access to some of the company's data.

The affected individuals include 3,430 residents of South Carolina, 2,567 in Massachusetts and 1,873 in Rhode Island. Additional drivers in California and Illinois were also notified, but the number affected in those states has not been confirmed.

The confirmed figures from the three states place the number of affected individuals at nearly 8,000, with further notifications potentially increasing the total.

Uber said the breach began when an unauthorized party obtained internal credentials belonging to its service provider and used them to access data associated with Uber's account.

The company was notified of the incident on Oct. 9 and subsequently severed its connections with the compromised provider while investigating the unauthorized access.

By Oct. 13, investigators had determined that the stolen credentials had been used to access information containing personal data, according to breach notifications reviewed by Reuters.

The notifications did not initially identify the affected technology provider. TechCrunch subsequently identified Fireworks AI, a company whose platform allows developers and businesses to run and access artificial intelligence models.

An Uber spokesperson confirmed the connection to Fireworks, saying the incident involved a third-party vendor that had access to some Uber information.

Fireworks separately acknowledged unauthorized access to parts of its systems that affected customer data. The company had previously disclosed a security incident involving stolen customer information, including billing records and certain private AI datasets.

The breach also affected Notion, the workplace productivity platform, which confirmed earlier that some of its information had been compromised in the Fireworks incident.

Fireworks attributed the intrusion to a financially motivated cybercriminal group interested in stealing and selling access tokens used to interact with large language models. However, no known hacking group has publicly claimed responsibility for the attack.

The theft of driver's license information is particularly concerning because the records can contain identifying details that may be used in identity fraud. Unlike passwords, which can be changed after a security incident, government-issued identification numbers are more difficult to replace.

Uber has not disclosed the full range of personal information exposed or the total number of drivers affected nationwide.

The company said it has found no evidence that the stolen information has been misused, according to Reuters.

Affected individuals are being offered free credit monitoring and fraud assistance through Cyberscout, a TransUnion service. They have 90 days from the date of their notification letter to enroll.

Uber has not indicated whether additional drivers will receive notifications as its investigation continues.

The incident also highlights the security challenges companies face when sharing sensitive information with outside technology providers. Businesses increasingly rely on third-party platforms to handle computing, data processing and AI-related operations, giving those providers access to information beyond their own customer records.

In this case, compromised credentials at a single technology provider enabled unauthorized access to information belonging to more than one company.

The attack is Uber's second publicly reported security incident this year. Earlier in 2026, the company's Uber Freight division was affected by a separate breach, with an extortion group claiming responsibility for stealing information.

Uber has experienced other major cybersecurity incidents, including a 2022 attack in which a hacker gained access to internal systems after compromising an employee's credentials.

The latest breach has prompted notifications across several U.S. states, but the number of affected drivers could rise as additional regulatory filings become available.

For drivers receiving notices, Uber's disclosure provides instructions on accessing identity protection services and monitoring their personal information for suspicious activity.