Uber notifies drivers of data theft via Fireworks AI breach
Uber is informing thousands of drivers that personal and driver's license information was stolen in an October breach at its technology provider, Fireworks AI. The incident highlights the security risks associated with third-party vendors handling sensitive corporate data.
Uber is notifying thousands of drivers that their personal and driver's license information was compromised in a data breach at Fireworks AI, a tech provider that allows developers to access open AI models. Notices filed with U.S. attorneys general, including in California, state that Uber was informed on October 9th that hackers had stolen internal credentials to access the company's data. Fireworks AI reported the breach last month, disclosing that attackers stole customer billing data and private AI datasets. Notion confirmed that its data was also stolen during the same hack. The breach notices specify that driver's licenses for 2,567 individuals in Massachusetts, 3,430 people in South Carolina, and 1,873 residents of Rhode Island were stolen. An Illinois filing noted that the number of affected state residents is pending. Uber also notified drivers in California but did not specify the count in the available filings. No cyber criminal group has taken credit for the theft.