🔍 Read the full analysis: What Can Uber Drivers Do About The License Data Breach? on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Uber has begun notifying people whose information was accessed through a third-party vendor, Fireworks AI; breach notices reported by TechCrunch say the data includes driver’s license information. Uber’s filings list affected residents in several states, but the company has not disclosed a national total. People who receive a letter can enroll in free credit monitoring and fraud assistance within 90 days of its date.
Uber has begun notifying people in the United States that their information was accessed through a security incident at third-party vendor Fireworks AI, and breach notices reviewed by TechCrunch say the data includes driver’s license information. Uber’s public notice identifies about 1,873 affected Rhode Island residents, while reporting has identified additional state counts; Uber has not disclosed a nationwide total.
Uber’s notice filed with the California attorney general says a service provider told the company on October 9 that an unauthorized party had compromised the provider’s internal credentials and used them to access Uber’s account with the provider. Uber says its investigation determined on October 13 that data connected to the service provider had been accessed. The filing gives October 7, 2026, as the breach date and November 10 as the reporting date.
The California filing does not name the vendor or specify the affected data in its public sample letter. Uber confirmed Fireworks AI’s involvement to TechCrunch, saying the vendor had access to some Uber data. TechCrunch reported, based on breach notices it reviewed, that the accessed information includes driver’s license data. The letter sent to each person is the document that identifies which information was involved in that recipient’s case.
State notices provide only a partial count: Uber lists approximately 1,873 Rhode Island residents; TechCrunch reported 2,567 people in Massachusetts and 3,430 in South Carolina. Those three figures total 7,870, but they do not establish the full number affected. TechCrunch also reported that Illinois’ count was pending and that California drivers had been notified, without a published total. Uber says recipients can access free credit monitoring and fraud assistance through Cyberscout, a TransUnion company, by enrolling within 90 days of the date on their letter.
Uber driver data breach · Oct 6 – Nov 13, 2026
How driver data was reached through a vendor
What Uber, its vendor and the first reports say happened, step by step.
Where the data was (schematic)
What happened
- Oct 6Fireworks detects misuse of its internal credentials and starts containmentPacific time, per Fireworks
- Oct 7Date of breach in Uber’s California filing
- Oct 9The provider alerts Uber; Uber cuts its data connections and investigates
- Oct 13Uber’s investigation: Uber data was accessed
- Nov 10Letters dated; notice filed with the California attorney general
- Nov 13TechCrunch: driver’s license data stolen; Uber names Fireworks.ai
- 90 daysAffected people can enroll in free credit monitoring; credit reports, fraud alert or freeze
Sources: Uber notice of November 10, 2026 and breach entry, California Attorney General; Fireworks AI security bulletins (last updated Oct 10 and Nov 9, 2026); TechCrunch, Nov 13, 2026. The chain is a schematic; Uber has not said what the data was used for.
Graphic: Powered by Thorsten Meyer AI
Protecting Identity After the Vendor Breach
A driver’s license number is sensitive identity information. If it was included in a recipient’s accessed data, the person may face a risk of identity misuse or targeted fraud. Uber says it has not identified misuse to date, but that statement does not establish that the information cannot be used later.
The incident also matters because the reported access occurred through a third-party service provider, rather than a breach described as an intrusion into Uber’s own systems. Drivers may not know which outside services process their information, yet a vendor’s access can create consequences for them. Reviewing the notice promptly can tell each recipient which data was involved and how to use the offered support.
The available state counts do not show the full reach. Without a national figure or a complete accounting of the affected data, drivers cannot infer from the current filings whether notices have reached everyone potentially affected. People should rely on their own letter and official updates rather than assume that another state’s disclosure describes their case.
Products Worth Considering
Apple Watch Ultra 4 GPS + Cellular, 49 mm
Amazon Kindle Paperwhite Signature Edition (2024), 32 GB, Metallic Black
Apple AirPods Pro 3 Wireless Earbuds with Active Noise Cancellation
As an affiliate, we earn on qualifying purchases.
How Fireworks Entered the Timeline
Fireworks AI provides businesses with a platform for running and customizing open AI models. Its security bulletins say the company identified unauthorized use of internal credentials on October 6, Pacific time, and that an unauthorized party accessed environment variables used in evaluation jobs in a limited number of customer accounts. Fireworks said it began notifying affected customers on October 7 and published a bulletin after notifying customers it had identified on October 9.
Those dates broadly align with Uber’s filing, which lists October 7 as the breach date and says Uber was alerted on October 9. Fireworks later updated its account to include impacts to account and billing information and, for a limited set of accounts, secrets, datasets and incomplete models. The companies have not publicly identified which Fireworks system held the Uber data or explained how the driver information was stored there.
Fireworks said evidence linked the activity to a financially motivated group seeking to sell unauthorized access to large language models, a practice sometimes called “LLMJacking.” That is the company’s assessment; TechCrunch reported that no known group had claimed the theft. It does not establish who accessed the Uber data or what they did with it.
““An unauthorized third party had compromised the service provider’s internal credentials and used them to access Uber’s account with the service provider.””
— Uber’s sample security notice
The Unpublished National Count
The total number of affected Uber customers or drivers is unknown. Uber has not published a nationwide count, and current figures come from separate state notices and reporting. Illinois’ affected-person count was described as pending, while the California total was not disclosed in the reporting provided.
The public sample letter leaves the affected-data field blank for each recipient. As a result, reports that driver’s license information was included do not establish that every person notified had the same information accessed. Individuals need to check their own letter for the data listed in their case.
It is also not clear which Fireworks system contained the Uber data, whether information was copied or otherwise used after access, or whether the investigation has identified every affected person. Uber says it has not found misuse so far. The available material does not confirm that the data has been used for fraud, nor does it rule out future misuse.
Check Letters and Enrollment Deadlines
People who receive a letter should read its data description and follow the enrollment instructions for Cyberscout’s free credit monitoring and fraud assistance. Uber says enrollment must be completed within 90 days of the letter date, so recipients should use the date printed on their own notice rather than assume all letters share the same deadline.
Recipients should keep the notice and monitor accounts and credit activity for unfamiliar changes. If they see suspicious activity, they can contact the relevant financial institution or credit reporting service and use the assistance named in the letter. These steps are general precautions; Uber’s notice says it has not identified misuse to date.
Further details may come through additional state filings, updated company notices or reporting as the investigation continues. The key open developments are a fuller count of affected people, a clearer account of the data involved and any update on whether investigators have found misuse. Until then, the individual notice is the best available source for each recipient’s specific exposure.
Key Questions
What should an Uber driver do if they receive a breach letter?
Read the notice to see which information was accessed, then follow its instructions for free credit monitoring and fraud assistance. Uber says recipients must enroll within 90 days of the letter date.
Was driver’s license information exposed?
TechCrunch reported that breach notices it reviewed included driver’s license information. Uber’s public sample notice does not specify the data for each recipient, so people should check their individual letter.
How many people were affected?
A nationwide total has not been published. Available figures include about 1,873 Rhode Island residents in Uber’s notice and counts reported by TechCrunch for Massachusetts and South Carolina; other state totals remain incomplete or undisclosed.
Has Uber reported that anyone misused the data?
Uber says it has not identified misuse to date. The available information does not confirm that the accessed data was used for fraud, but it also does not establish that future misuse is impossible.
Was Uber itself hacked?
Uber’s notice says the access followed compromise of a service provider’s internal credentials and involved Uber data connected to that provider. Uber identified Fireworks AI as the vendor to TechCrunch; the notice does not describe an intrusion into Uber’s own systems.
Source: ThorstenMeyerAI.com
