Uber drivers’ personal data and licences exposed in supplier hack

Uber has disclosed that attackers accessed driver data after hacking a third-party provider used by the company. The breach exposed personal information and driving licences, highlighting how a security incident at a supplier can affect a much larger organisation’s customers and workers.

The provider was Fireworks.ai, a cloud platform that offers access to open-source AI models. Uber said the provider was hacked on 9 October and attackers used stolen internal credentials to reach data linked to its service; the total number of affected drivers is unknown. State filings cited by TechCrunch list 3,430 exposed licences in South Carolina, 2,567 in Massachusetts and 1,873 in Rhode Island, while it remains unclear whether the stolen information was sold or published.