Uber notifies thousands of drivers that their license data was compromised in breach at artificial intelligence partner

Uber has disclosed that an October data breach at third-party artificial intelligence provider Fireworks AI compromised the personal information and driver's licenses of thousands of its drivers. Filings submitted to several state attorneys general indicate that attackers infiltrated the vendor on October 9 and stole internal credentials, which were then used to access Uber data stored with the service. While Uber has not shared the overall national total of affected drivers, state filings reviewed by TechCrunch confirm that compromised driver's licenses include 3,430 individuals in South Carolina, 2,567 in Massachusetts, and 1,873 in Rhode Island, alongside impacted drivers in California and Illinois. [1][2]

Fireworks AI, a cloud platform that gives developers access to open-source artificial intelligence models, attributed the breach to a cybercriminal group looking to sell stolen access tokens for large language models. The provider's wider security incident also resulted in the theft of customer billing records and private datasets, with online productivity startup Notion confirming its data was exposed as well. An Uber spokesperson directed inquiries to Fireworks, which acknowledged unauthorized access to some systems but did not address detailed questions about the event. [1][2]