Uber says US drivers' license data stolen in data breach - CNA
Uber revealed that an unauthorized party accessed its data through compromised credentials at a service provider, stealing drivers' license information of approximately 1,873 Rhode Island residents.
According to a notice posted on the California attorney general's website, Uber confirmed that an unauthorized party used compromised credentials at a service provider to access its data. The notice, dated November 10, revealed that the provider informed Uber on October 9 about the compromised credentials being used to access Uber's account.
Investigation details
Uber severed its data connections with the provider and launched an investigation. On October 13, the company determined that the unauthorized party had accessed Uber data, including recipients' personal information. While Uber did not name the provider or specify the data involved, TechCrunch reported that the provider was Fireworks AI and that drivers' license information was compromised.
The notice said the incident affected about 1,873 Rhode Island residents. It also carried instructions for residents of the District of Columbia, Maryland, North Carolina, New York and Pennsylvania.
Response measures
Uber is offering affected individuals free credit monitoring and fraud assistance through Cyberscout, a TransUnion company. Recipients have 90 days from the date of the letter to enroll in these services. The company stated it had not identified any misuse of the data to date but continues to investigate the breach.
Related
