World news and discussion on TalkFuse.
Uber says US drivers’ license data stolen in data breach
Uber said an unauthorised party used stolen credentials to access its data through a service provider, exposing some people’s personal information. The breach highlights the risks of third-party access to sensitive data, including information about drivers.
The provider told Uber on 9 October that its credentials had been compromised; Uber’s investigation confirmed access to its data on 13 October. The notice did not name the provider or specify the data, but TechCrunch reported that it was Fireworks AI and that drivers’ licence details were included. About 1,873 Rhode Island residents were affected, with guidance also provided for residents of five other states and Washington, DC. Uber is offering free credit monitoring and fraud assistance for 90 days, and said it had found no evidence of misuse.
In short
- A provider’s compromised credentials exposed some Uber data.
- About 1,873 Rhode Island residents were affected.
- Uber says no misuse has been identified so far.
Explained simply
Uber is a ride-hailing company that connects passengers with drivers through an app. To operate, it handles personal information about drivers, and it may share some data with outside companies that provide services.
This story concerns unauthorised access to Uber data using credentials taken from one of those providers. The provider’s identity and the precise information accessed were not specified in Uber’s notice; reporting by TechCrunch said the provider was Fireworks AI and that drivers’ licence details were involved.
The incident matters because outside providers can have access to sensitive information held by large companies. People whose details were exposed may face risks such as identity fraud, while the scale and effects depend on what data was accessed and whether it is misused.
Americas Cybersecurity Technology World