Uber confirms vendor breach exposed thousands of drivers’ licenses
Uber is notifying thousands of drivers that their personal information and driver's license numbers were stolen in October through a third-party tech provider.
The disclosure came through regulatory filings with state attorneys general, including California. The breach occurred through one of Uber's outside tech providers rather than the company itself.
Breach timeline
According to Uber's filings, the provider alerted the company on October 9 that it had been compromised. Hackers had broken into the vendor's systems and taken internal credentials, which were then used to access Uber's data.
The unauthorized access began as early as October 7. Uber confirmed the data breach on October 13 and began notifying affected drivers on November 10.
Scale of impact
State-level filings reveal the scope of the breach. South Carolina reported 3,430 affected residents, Massachusetts reported 2,567, and Rhode Island reported 1,873. Drivers in other states, including California, were also affected, though a complete national figure hasn't been disclosed.
The records confirm that driver's license numbers were part of the stolen data, though specific details about exposed fields remain redacted.
Response and next steps
Uber has cut ties with the unnamed vendor and is offering affected drivers free credit monitoring and fraud assistance through a partnership with TransUnion. The company says it has seen no known misuse of the stolen information so far.
The incident adds to a difficult year for driver's license data security. Earlier in 2026, IDScan.net exposed approximately 153 million license scans across the US and Canada.
Drivers, as independent contractors who had to provide license information to work on the platform, face particular risks. Key developments to watch include whether additional states publish affected counts, if the vendor is named, and if any stolen license data surfaces in fraud cases.
Related
