Key facts
- Uber said hackers stole internal credentials from the provider and used them to access Uber data.
- Uber did not say how many drivers were affected or how many it was notifying.
- Breach notices seen by TechCrunch list driver's licenses of 2,567 people in Massachusetts and 3,430 in South Carolina.
- A Rhode Island notice listed 1,873 residents; an Illinois filing said the number affected was pending.
- Fireworks attributed its breach to a financially motivated cybercriminal group seeking to sell stolen LLM access tokens.
- No known cybercriminal group has taken credit for the data theft, per the report.
Uber is notifying thousands of drivers that their personal and driver's license information was stolen in an October data breach at one of its technology providers, according to breach notices filed the week of November 13, 2026 with several US attorneys general, including California.
Uber said the provider notified it on October 9 that hackers had broken in and stolen internal credentials, which were then used to access Uber's data. The company said it subsequently began telling affected drivers that their information was stored with the provider. Uber did not say how many customers were affected or how many drivers it was notifying.
TechCrunch reported that the provider is Fireworks AI, which lets developers access and use open AI models. Fireworks reported a data breach in October in which hackers stole customer information, including billing data and some private AI datasets. Online productivity startup Notion confirmed its data was also stolen in the Fireworks breach, according to the report.
An Uber spokesperson told TechCrunch the driver notices relate to a security incident at a third-party vendor, Fireworks.ai, which had access to some Uber data, and deferred questions to Fireworks. A Fireworks spokesperson did not respond to questions about the incident, the report said.
Breach notices seen by TechCrunch list driver's licenses of 2,567 individuals in Massachusetts, 3,430 people across South Carolina and 1,873 Rhode Island residents. An Illinois filing showed some state residents had driver's license information stolen but said the number affected was pending. Uber also notified drivers in California without saying how many were affected. The report said the number is expected to rise as more notifications arrive.
Fireworks attributed its breach to a financially motivated cybercriminal group whose goals are to sell stolen tokens for accessing large language models. No known cybercriminal group has taken credit for the data theft. The report said this is Uber's second known data breach in 2026; the company previously reported a security incident at its Uber Freight truck shipping unit, for which an extortion gang took credit for stealing data.