Uber has sent breach notices after a supplier hack exposed thousands of drivers’ personal information, including driver’s license data, according to Engadget’s November 14, 2026 report. Source
The service provider was hacked on October 9, 2026, according to Engadget’s account of Uber’s filing with several state attorneys general. Attackers stole internal credentials and used them to access Uber data connected to that provider. Source
Uber identified the vendor to TechCrunch as Fireworks.ai, according to Engadget. The cloud platform provides access to open-source AI models. Source
Thousands affected, without a complete count
Engadget, citing TechCrunch, reported that driver’s licenses were exposed for people in three states: Source
- South Carolina: 3,430 people
- Massachusetts: 2,567 people
- Rhode Island: 1,873 people
Those figures add up to 7,870 people across three states, not a nationwide total. The notices were out, but the full count wasn’t: Engadget reported that neither Uber nor Fireworks had disclosed the overall number of affected drivers. Source
What Fireworks said—and what remains unknown
Fireworks acknowledged an October breach that compromised client data and attributed the attack to a cybercriminal group that sells stolen tokens used to access large language models, according to Engadget. Whether the stolen driver information was sold or leaked online remained unclear in the November 14 reporting. Source
Comments