GoKawiilUber notifies thousands of drivers after Fireworks.ai data breach
Uber has informed several US attorneys general that driver personal information and license data were exposed after its AI service provider, Fireworks.ai, was hacked on October 9. The attackers stole internal credentials to access Uber's data held by Fireworks, which runs a cloud platform for open-source AI models. State filings show at least 3,430 affected drivers in South Carolina, 2,567 in Massachusetts and 1,873 in Rhode Island, though total numbers remain undisclosed.
GoKawiil's interpretation of the reporting above, not reported fact.
The breach highlights the growing risk that companies face from third-party AI vendors handling sensitive customer data, since a single compromised provider can expose information across multiple corporate clients. Fireworks has attributed the attack to a cybercriminal group known for selling stolen access tokens to large language models, suggesting the breach may be linked to broader attacks on AI infrastructure. It remains unclear whether the stolen driver data has been sold or leaked, which could affect how much further harm results.
- Uber's driver data was exposed via a breach at third-party AI vendor Fireworks.ai on October 9.
- State filings confirm thousands of affected drivers across South Carolina, Massachusetts and Rhode Island, with full totals undisclosed.
- Fireworks.ai blamed a group that trades stolen LLM access tokens, raising concerns about AI supply-chain security.
Aura Identity Theft Protection subscription — With Uber drivers' personal info and license data exposed in this breach, identity theft monitoring is a smart safety net. Aura watches for misuse of your SSN, driver's license, and financial accounts, alerting you quickly if something suspicious pops up. It's a practical step for anyone affected by third-party data breaches like this one.
See Aura Identity Theft Protection subscription on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: engadget.com — Mariella Moon, 2026-11-14
Published there as: “Uber drivers' information stolen in a third-party hack”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.