From TechCrunch · Zack Whittaker · · 1m 40s
Uber data breach exposes thousands of drivers' licenses
Hackers stole personal information from thousands of Uber drivers through a compromised third-party vendor.
In brief
Hackers stole personal information from thousands of Uber drivers through a compromised third-party vendor. Uber confirmed that hackers stole driver's license information from thousands of its drivers in an October breach at vendor Fireworks AI. Originally reported by TechCrunch.
Uber notifies drivers of stolen license data
Uber is notifying thousands of drivers that their personal and driver's license information was stolen during an October data breach at one of the company's tech providers.
Breach traced to vendor Fireworks AI
Uber was notified on October nine by the provider that hackers broke in and stole internal credentials, which were used to access Uber's data.
Notion also hit in Fireworks hack
Fireworks reported a data breach last month in which hackers stole its customers' information, including billing data and some private AI datasets.Online productivity startup Notion confirmed its data was also stolen in the Fireworks hack.
Thousands of drivers affected across states
The stolen data includes driver's licenses of two thousand five hundred sixty-seven individuals in Massachusetts, three thousand four hundred thirty people across South Carolina, and one thousand eight hundred seventy-three residents of Rhode Island.
Breach attributed to financially motivated criminals
Fireworks attributed its breach to a financially motivated cybercriminal group whose goals are to sell stolen tokens for accessing large language models. No known cybercriminal group has taken credit for the data theft.
Second Uber breach this year
This is Uber's second known data breach this year. The company reported a security incident at its Uber Freight truck shipping unit, for which an extortion gang took credit for stealing data.
At a glance
Uber confirmed that hackers stole driver's license information from thousands of its drivers in an October breach at vendor Fireworks AI.
