Uber Drivers' Licence Data Stolen in Fireworks AI Breach Affecting Thousands

Uber has confirmed that hackers stole the personal information and driver's licence details of thousands of its drivers in the United States, after breaking into the systems of Fireworks AI, a third-party artificial intelligence vendor used by the ride-hailing company. The company disclosed the Uber drivers licence data breach on Friday, November 13, 2026, more than a month after the intrusion was first detected, and said it is now notifying affected drivers and offering them free credit monitoring.

State filings reviewed by TechCrunch show at least 7,870 people were affected in just three states, and the true nationwide total is likely to be higher. Uber said it has found no evidence so far that the stolen information has been misused, but a driver's licence is one of the most sensitive identity documents a person holds, and its theft can leave victims exposed to identity fraud for years.

Key Points

• Uber confirmed on Friday, November 13, 2026, that hackers stole personal information and driver's licence details belonging to thousands of its US drivers.
• The breach struck Fireworks AI, a vendor that hosts open AI models for developers. Attackers stole its internal credentials and used them to reach Uber's account.
• State filings show at least 7,870 people affected in three states: 3,430 in South Carolina, 2,567 in Massachusetts and 1,873 in Rhode Island, with more in Illinois and California.
• Uber says it has found no evidence the stolen data has been misused and is offering free credit monitoring and fraud help through Cyberscout, part of TransUnion.
• Fireworks blamed a financially motivated criminal group seeking to sell stolen access to large language models, a practice known as LLMJacking. App maker Notion was also hit in the same intrusion.

What Happened

Fireworks AI told Uber on October 9 that hackers had stolen its internal credentials and used them to access Uber's account with the provider. Uber's investigation confirmed by October 13 that driver data had been accessed. The company then cut its data connections with Fireworks and began notifying the drivers whose information was taken.

Notification letters were dated November 10, and breach notices were filed this week with several state attorneys general, including California. The filings put the toll at 2,567 people in Massachusetts, 3,430 in South Carolina and 1,873 in Rhode Island — 7,870 in all — with affected residents also reported in Illinois and California. Uber has not disclosed a nationwide total.

Background: Fireworks AI and the October Intrusion

Fireworks AI, based in San Francisco, hosts open AI models for developers, letting businesses run artificial intelligence features without building the infrastructure themselves. Uber was one of its customers, and the attackers did not need to break into Uber directly: they compromised the vendor and walked through the connection between the two companies, a pattern known as a supply-chain attack. The same route lies behind many recent attacks, including a ransomware attack on Vanderbilt University in which a gang claimed to have stolen a million Social Security numbers. The Uber case shows the same risk reaching the gig economy, where millions of workers hand over identity documents simply to do their jobs.

Uber Drivers Licence Data Breach: What Was Stolen

Uber said the attackers took personal information and driver's licence details belonging to thousands of its US drivers, and it has not published a full list of the data fields involved. A driver's licence typically carries a person's full name, date of birth, home address and licence number — exactly the combination identity thieves need to open accounts, pass identity checks and impersonate a victim. The confirmed toll so far is 7,870 people across three states, but those are only the states whose filings have been seen in public. Illinois and California have also reported affected residents, and Uber operates in every US state, so the final count could be considerably larger.

Reactions

Uber said it has found no misuse of the stolen data so far and is offering affected drivers free credit monitoring and fraud assistance through Cyberscout, a TransUnion company — the standard response after a breach of identity documents, giving victims a way to spot new accounts opened in their name. Fireworks AI attributed the breach to a financially motivated criminal group seeking to sell stolen access to large language models, a practice the industry calls LLMJacking. The company said it notified law enforcement and is working with Palo Alto Networks' Unit 42 on the investigation. The intrusion also reached beyond Uber: productivity app Notion confirmed that some of its customers' data was taken in the same Fireworks breach.

Why It Matters

A stolen driver's licence is far more dangerous than a stolen password, because a licence cannot simply be reset: the details on it stay valid for years and can be used again and again to impersonate the holder. For Uber drivers, many of whom depend on the platform for their income, the theft adds a second worry to an already precarious job — the document they need to work is now in criminal hands. The case also exposes a weak point in the AI boom. As companies race to add artificial intelligence to their products, they hand data to a growing crowd of AI vendors, and those vendors have become valuable targets: the attackers here wanted to steal and resell access to large language models, and the driver data came with it. Investment in AI keeps growing, while oversight of the sector remains unsettled.

What Happens Next

Uber will continue notifying affected drivers, and further state filings may raise the known victim count above 7,870. Drivers who receive a letter should enrol in the free credit monitoring on offer, watch their bank and credit statements closely, and consider a fraud alert or credit freeze. Fireworks AI's investigation with Unit 42 and law enforcement is continuing. For Uber, the breach is likely to mean a hard look at which outside vendors hold driver data and what access they are given.

Frequently Asked Questions

How many Uber drivers were affected by the breach?

At least 7,870 people in three states: 3,430 in South Carolina, 2,567 in Massachusetts and 1,873 in Rhode Island. More were reported in Illinois and California; no nationwide total has been disclosed.

What information was stolen?

Uber said hackers stole personal information and driver's licence details belonging to thousands of its US drivers. The company has not published a full list of the data fields involved.

Has the stolen data been misused?

Uber said it has found no evidence of misuse of the stolen data so far. Affected drivers are being offered free credit monitoring and fraud assistance through Cyberscout.

What is Fireworks AI?

Fireworks AI is a company that hosts open AI models for developers, letting businesses run artificial intelligence features without building the infrastructure themselves. Uber was one of its customers.

What should affected drivers do?

Drivers who receive a notification letter should enrol in the free credit monitoring Uber is offering, monitor their bank and credit statements, and consider a fraud alert or credit freeze to stop new accounts being opened in their name.