According to TechCrunch, Uber is notifying thousands of drivers that their personal information and driver’s license details were compromised during a security breach at a third-party technology provider.
The ride-hailing company confirmed that it was alerted on Oct. 9 regarding unauthorized access to its data stored by Fireworks AI, a firm that enables developers to utilize open artificial intelligence models. The breach involved hackers stealing internal credentials to access sensitive information. While Uber has not disclosed the total number of affected individuals, filings across several states indicate significant impact. For instance, 2,567 individuals in Massachusetts, 3,430 in South Carolina and 1,873 in Rhode Island had their license information exposed. Other companies, including the productivity startup Notion, were also affected by the incident. Fireworks AI attributed the attack to a financially motivated group seeking to sell stolen tokens for accessing large language models. This event marks the second security incident for Uber this year, following a breach at its freight unit. As investigations continue, the total number of impacted drivers is expected to rise. Both Uber and Fireworks AI are currently managing the fallout of this supply chain vulnerability, which highlights the risks associated with third-party data management in the tech industry.
Source: TechCrunch
