Fireworks AI Breach Stole Uber Drivers’ License Data From Thousands

Hackers used stolen credentials to access Uber data in an incident involving Fireworks AI, and the stolen information included drivers’ license details for at least 7,870 people in three states.

Uber said Fireworks AI, a third-party vendor with access to some Uber data, notified it on Oct. 9 that hackers had stolen internal credentials and used them to access Uber data.

The disclosed counts are 2,567 people in Massachusetts, 3,430 in South Carolina and 1,873 in Rhode Island. Illinois’ count is pending. Uber also notified California drivers, but did not disclose a total for the state. The three-state counts add to 7,870.

Fireworks AI provides developers access to open AI models. Uber began notifying affected drivers after learning of the incident and did not disclose the total number of people affected.

The incident is Uber’s second known data breach this year. An extortion gang claimed responsibility for stealing data in a separate security incident at Uber Freight, the company’s truck-shipping unit.