Uber drivers’ licence data stolen in Fireworks AI hack
What happened
Hackers accessed Uber drivers' personal and license information by breaching Fireworks AI, a company that provides access to AI models. The breach occurred after attackers obtained and misused internal credentials at Fireworks AI. Uber was informed of the incident on October 9, and has since notified affected drivers in several U.S. states. Fireworks AI also reported two separate security incidents in October, involving both billing data and AI model assets.
Key details
- Fireworks AI is valued at $17.5 billion as of July.
- Residents in California and Illinois were also notified, but no numbers were given.
- Fireworks AI disclosed that attackers took billing data, secrets, datasets, and unfinished model weights in the incidents.
- This is Uber’s second reported data breach in 2023, following an incident involving Uber Freight in August.
Why it matters
Thousands of Uber drivers in multiple states now face exposure of their personal and license information, which could lead to identity theft or fraud. Uber and its drivers must address the risks and potential costs associated with this data breach. Companies using Fireworks AI or similar vendors may need to reassess their data security and the types of information shared with third-party providers.