Uber confirms thousands of driver IDs compromised in data breach

Uber has notified over 8,000 drivers that their personal data and driver's license information were compromised in a recent data breach, according to notifications submitted to state attorneys general. The breach was revealed by a third-party service provider, Fireworks AI, which informed Uber of the intrusion. The stolen data includes billing information and some internal datasets belonging to Fireworks AI's thousands of clients, as per initial breach notices involving productivity software Notion.

Fireworks AI disclosed that hackers, likely driven by a motive to sell LLM tokens, breached its cloud provider to gain access to its development system. They then utilized internal credentials to access client data. Notion confirmed that the intruders obtained anonymized chat transcripts of Notion AI customers, but did not provide further details on the extent of the data breach.

Uber mandates drivers to submit proof of a valid driver's license, insurance, residency, bank statements, and payment information. In June, the company announced enhanced background checks and stricter policies for reviewing and banning drivers based on public records. However, Uber has not specified the exact number of drivers affected by the breach but assured all impacted workers would be notified.

Uber operates a fleet of more than 10 million drivers and couriers, based on third-party estimates. Currently, Uber has alerted approximately 8,000 compromised driver accounts in Massachusetts, South Carolina, and Rhode Island.