
Uber Drivers' Information Stolen In A Third-Party Hack - AOL.com
Uber has revealed that thousands of its drivers' personal information and licenses were compromised in a data breach caused by a hack of one of its service providers.
Uber disclosed in a filing with attorneys general that a third-party hack exposed the personal information and licenses of thousands of its drivers. The breach occurred on October 9 when attackers stole internal credentials from Uber's service provider, gaining access to the company's data connected to that vendor.
Vendor Confirms Breach
The affected third-party vendor, Fireworks.ai, confirmed it suffered a data breach last month. The cloud platform, which provides clients access to open-source AI models, attributed the hack to a cybercriminal group that sells stolen tokens used to access large language models.
It's unclear if the stolen information was also sold or leaked online.
State-by-State Impact
Neither company has revealed the total number of affected drivers, though TechCrunch reported specific state figures. The driver's licenses of 3,430 people from South Carolina, 2,567 in Massachusetts, and 1,873 in Rhode Island were exposed in the incident.