Hackers Steal Uber Driver Data Using AI Bots

A recent data breach at Uber has compromised the personal information of thousands of drivers in the United States. The breach occurred after hackers accessed records held by Fireworks AI, a third-party technology provider, using AI bots. Uber confirmed the breach and is notifying affected individuals, but has not disclosed the total number of people impacted nationwide. The incident was first reported to Uber on October 9, 2026.

The exposed information includes driver's license details, and state notices show that the breach affected 2,567 people in Massachusetts, 3,430 in South Carolina, and approximately 1,873 in Rhode Island. This totals 7,870 people across three states, although additional notifications involve other states, indicating a larger impact. Uber immediately cut its data connections with the provider and opened an investigation upon discovering the breach.

Investigators confirmed on October 13 that the attacker had accessed Uber data, including personal information belonging to people now receiving breach notices. The breach is attributed to Fireworks AI, a vendor that handled data for Uber. The provider was also involved in a separate breach affecting Notion AI chat transcripts, highlighting the risks associated with a single provider's security incident.

The available evidence suggests that the breach concerns drivers and should not be read as confirmation that all Uber riders or accounts were affected. Uber's official breach notice states that the company had not identified misuse of the affected information when the letter was issued. The company is offering free credit monitoring and fraud assistance through Cyberscout, a TransUnion company.

Affected drivers are advised to review their individual letters, check account statements, and report suspicious activity. Uber also recommends considering fraud alerts or credit freezes. The Federal Trade Commission explains that a credit freeze limits access to credit reports, making fraudulent new accounts harder to open. Recipients must enroll in the credit monitoring service within 90 days of the letter's date using their activation code.

The breach notification letter was dated November 10, 2026, and Uber has taken steps to address the incident. The company is working to protect affected drivers and prevent similar breaches in the future. The incident highlights the importance of robust security measures for third-party providers handling sensitive data.

Key points from the breach include the exposure of driver's license information and the impact on at least 7,870 drivers across three states. Uber is providing support to affected individuals, including free credit monitoring and fraud assistance. The incident serves as a reminder of the risks associated with data breaches and the importance of vigilance in protecting personal information.

Key points

• 7,870 drivers affected across Massachusetts, South Carolina, and Rhode Island
• Exposed data includes driver's license information
• Uber offering free credit monitoring and fraud assistance to affected drivers