Uber is notifying thousands of drivers that their personal data and driver’s licence information were exposed after a technology partner was hacked in October, TechCrunch reported on Thursday.
Uber filed breach notices this week with attorneys general in several U.S. states, including California, the report said. Uber said it was notified on Oct. 9 by the partner that hackers broke in and stole internal authentication credentials. The hackers used those credentials to access Uber data. Uber then began notifying drivers whose personal data had been stored at the partner.
TechCrunch said the partner was Fireworks AI. Fireworks AI provides a platform that lets developers use open-weight AI models.
Fireworks AI said last month that customer information including payment data and some non-public AI datasets were stolen in a hack. Productivity app startup Notion also confirmed its data was stolen in the hack.
An Uber spokesperson said the notices sent to drivers were related to a security incident at external partner Fireworks AI, which could access some Uber data.
Uber has suffered a data leak for the second time this year, based on what is known.
Chi-gyu Hwang
delight@d-today.co.kr