More than 7,800 Uber drivers had their driving licence information stolen in a cyberattack targeting computing resources at Fireworks AI, a technology vendor used by Uber. The incident involved compromised vendor credentials that allowed attackers to access Uber's account on the AI platform, although Uber's own systems were not breached, according to information highlighted by Coin Bureau.
The reported incidents span multiple US states, with South Carolina recording 3,430 affected drivers, Massachusetts reporting 2,567 and Rhode Island identifying another 1,873. Together, the three states account for 7,870 affected individuals, exceeding the 7,800 threshold cited in the report.
The full scale of the incident remains unclear. Uber has not disclosed a nationwide total of affected drivers, and additional states are covered by the data breach notification. This means the number of impacted individuals could extend beyond the figures reported in the three states.
Attackers Exploited Fireworks AI Credentials
The incident did not originate from a direct compromise of Uber's internal infrastructure. Instead, attackers reportedly obtained internal credentials belonging to Fireworks AI, a third-party vendor that Uber uses for artificial intelligence computing services.
After compromising those credentials, the attackers used them to access Uber's account on the Fireworks AI platform. The distinction is significant because the reported intrusion involved a vendor relationship rather than a direct breach of Uber's own systems.
According to the information shared by Coin Bureau, the attackers were primarily interested in obtaining access to GPU computing resources. Their objective was to secure free artificial intelligence computing power rather than specifically target drivers' personal information.
However, the access obtained through the compromised vendor credentials exposed sensitive information associated with Uber drivers. Driving licence details were among the information affected, effectively making the personal records collateral in an attack focused on computing resources.
Three States Account for 7,870 Affected Drivers
The state-level figures illustrate the extent of the reported exposure. South Carolina accounted for the largest number of affected drivers, with 3,430 cases. Massachusetts followed with 2,567, while Rhode Island reported 1,873.
Combined, the three states represent 7,870 affected Uber drivers. The figures provide a partial picture of the incident rather than a confirmed nationwide count, as Uber has not publicly disclosed the total number of individuals affected across the United States.
The notification also covers additional states, indicating that the reported figures do not necessarily capture the full geographical scope of the incident.
Questions Remain Over the Information Exposed
Despite the reported state-level disclosures, questions remain about the precise scope of the compromised information. Coin Bureau noted that Uber's own notification to California regulators still does not specify what information was stolen.
The absence of a detailed description in that notice leaves uncertainty surrounding the full extent of the exposed data. Although driving licence information has been identified in the reported state figures, the available information does not establish whether other markets categories of personal information were also compromised.
The incident underscores the security risks associated with third-party technology providers, particularly when external platforms hold credentials that can provide access to company accounts. In this case, attackers reportedly pursued GPU computing capacity through Fireworks AI, while Uber drivers' licence information became part of the resulting security incident.
Writer: Victoria Hale Technology & Blockchain Writer
Victoria Hale writes about blockchain technology, digital infrastructure, and the intersection of emerging technologies with finance. Her articles explore how new protocols and systems are shaping the evolving digital economy.
She prioritises clarity and accuracy when explaining technical developments to a general audience.
Check out other news and articles on Google News
Disclaimer:
The articles on Hokanews are here to keep you updated on the latest buzz in crypto, tech, and beyond—but they’re not financial advice. We’re sharing info, trends, and insights, not telling you to buy, sell, or invest. Always do your own homework before making any money moves.
Hokanews isn’t responsible for any losses, gains, or chaos that might happen if you act on what you read here. Investment decisions should come from your own research—and, ideally, guidance from a qualified financial advisor. Remember: crypto and tech move fast, info changes in a blink, and while we aim for accuracy, we can’t promise it’s 100% complete or up-to-date.
The articles on Hokanews are here to keep you updated on the latest buzz in crypto, tech, and beyond—but they’re not financial advice. We’re sharing info, trends, and insights, not telling you to buy, sell, or invest. Always do your own homework before making any money moves.
Hokanews isn’t responsible for any losses, gains, or chaos that might happen if you act on what you read here. Investment decisions should come from your own research—and, ideally, guidance from a qualified financial advisor. Remember: crypto and tech move fast, info changes in a blink, and while we aim for accuracy, we can’t promise it’s 100% complete or up-to-date.
