If you drive for Uber, there’s a chance your driver’s license data might have been stolen. The ride-hailing company has sent data breach notifications to at least several US states.
Uber’s breach notification to California victims blames a hacked service provider. The unnamed third party notified Uber about the incident on Oct. 9.
“On October 13, 2026, our investigation determined that the unauthorized party had used the compromised credentials to access Uber data connected to the service provider,” Uber says. “We are notifying you about this incident because our investigation concluded that your personal information was among the information accessed.”
The breach notification letter doesn’t disclose the information that was exposed. But Massachusetts’ report indicates that 2,567 driver’s licenses were accessed. Vermont’s official government site adds that 1,071 people in the state had their government ID numbers exposed.
Meanwhile, South Carolina reports that 3,430 people were affected. A copy of Uber’s breach notification also says 1,873 Rhode Island residents were affected, and suggests Uber drivers in New York, Maryland, North Carolina, and Washington, DC, were ensnared as well.
In the breach notification letter to victims, Uber says: “We promptly launched an investigation and severed our data connections with the service provider to prevent further unauthorized access to Uber data. We are providing you with access to credit monitoring and fraud assistance at no charge.”
Recommended by Our Editors
White House Network Possibly Exposed to Hackersijack Identities, Spread Malware
France Blames Refrigerator Hacks on Iran, Proposes Sanctions to Hit Back
Uber didn’t immediately respond to a request for comment. But TechCrunch reports that the affected third-party provider is Fireworks AI, which offers a platform for companies and developers to run and train AI models. Fireworks first disclosed the incident in October, and on Monday, it added: “Since then, we discovered impacts to account and billing information. For a limited set of accounts, we also discovered impact to secrets, datasets, and incomplete models.”
Fireworks says the hacker’s apparent goal was to sell unauthorized access to large language models, or what’s been called “LLMJacking,” which Google has been warning about. The incident also affected another Fireworks customer, Notion AI, which has notified customers that their “unattributable” AI chats were exposed due to the hack.
About Our Expert
Michael Kan
Principal Reporter
Experience
I’ve been a journalist for over 15 years. I got my start as a schools and cities reporter in Kansas City and joined PCMag in 2017, where I cover satellite internet services, cybersecurity, PC hardware, and more. I’m currently based in San Francisco, but previously spent over five years in China, covering the country’s technology sector.
Since 2020, I’ve covered the launch and explosive growth of SpaceX’s Starlink satellite internet service, writing 600+ stories on availability and feature launches, but also the regulatory battles over the expansion of satellite constellations, fights with rival providers like AST SpaceMobile and Amazon, and the effort to expand into satellite-based mobile service. I’ve combed through FCC filings for the latest news and driven to remote corners of California to test Starlink’s cellular service.
I also cover cyber threats, from ransomware gangs to the emergence of AI-based malware. In 2024 and 2025, the FTC forced Avast to pay consumers $16.5 million for secretly harvesting and selling their personal information to third-party clients, as revealed in my joint investigation with Motherboard.
I also cover the PC graphics card market. Pandemic-era shortages led me to camp out in front of a Best Buy to get an RTX 3000. I’m now following how the AI-driven memory shortage is impacting the entire consumer electronics market. I’m always eager to learn more, so please jump in the comments with feedback and send me tips.
Areas of Expertise
Latest By Michael Kan
- FCC Green-Lights 36 Next-Gen Starlink Gateways for Gigabit Speeds
- FBI: North Korea’s ‘FaceStealer’ Scheme Can Hijack Identities, Spread Malware
- FCC Plan to Let Satellites Tap Bluetooth Prompts Concerns About Surveillance
- Trump Wants Apple’s Tim Cook to Be Nvidia’s New CEO
- Amid US-Russia Talks, Ukraine Says Its Starlink Access Is Restricted Again
- More from Michael Kan
