Uber breach exposed driver license details, state filings show

Uber says a breach involving a third-party technology provider exposed personal information, including driver’s license details, belonging to thousands of its U.S. drivers. State filings identify 7,870 affected people in South Carolina, Massachusetts and Rhode Island, while the nationwide total has not been disclosed.

The three state notices list 3,430 affected South Carolina residents, 2,567 in Massachusetts and 1,873 in Rhode Island. Notices were also sent to drivers in California and Illinois, but the number affected in those states has not been confirmed. Uber’s filings include notices or instructions for residents in other states as well.

Uber’s notice says the provider informed the company on October 9, 2026, that compromised credentials had been used to access Uber data. An investigation determined by October 13 that the credentials had been used to reach information containing personal data. The notice, dated November 10, did not name the provider or specify the data fields exposed.

Uber identified the provider as Fireworks AI in a statement reported after the notices were filed. Fireworks acknowledged unauthorized access to some of its systems that affected customer...