Uber confirms hackers stole thousands of drivers’ license information in data breach

Summary

• Uber notified thousands of drivers that their personal and driver's license information was stolen during an October data breach at third-party provider Fireworks AI.
• Fireworks AI informed Uber on October 9 that hackers stole internal credentials used to access Uber's data.
• Uber filed breach notices with U.S. attorneys general in states including California, Massachusetts, South Carolina, Rhode Island, and Illinois.
• The stolen data includes driver's licenses for 2,567 individuals in Massachusetts, 3,430 people in South Carolina, 1,873 residents of Rhode Island, and an unspecified number in Illinois.
• Uber notified drivers in California but did not disclose the number of affected individuals in that state.
• Fireworks AI attributed the breach to a financially motivated cybercriminal group aiming to sell stolen tokens for accessing large language models.
• No known cybercriminal group has claimed responsibility for the data theft.
• Notion confirmed its data was also stolen in the Fireworks hack.
• This incident marks Uber's second known data breach this year, following a security incident at its Uber Freight unit.
• Uber did not specify the total number of customers or drivers affected by the breach.