Confirmed breach

Uber Technologies data breach

USUnited States · CA · Technology and telecom · Uber Technologies, Inc.

Uber Technologies (CA, United States) notified the California Attorney General, the Vermont Attorney General, the Texas Attorney General and the Iowa Attorney General of a data breach on 10 November 2026. It affected 7,870 people.

One of 2 organisations whose data was taken through Fireworks AI. The Fireworks AI breach →

People affected: 7,870people
Reported: 10 November 2026Official notice and 12 more
Time to tell: 34 daysfrom 7 October 2026 · the median is 147

Found to notice: 28 days (found 13 October 2026, by the company’s letter)
Who is affected: United States

What was exposed 6

Social Security numbers
Driver’s license numbers
Government ID numbers
Dates of birth
Names
Addresses

How it happened

How: Stolen password or login an unauthorized third party gained access to the internal login credentials belonging to one of Uber's service providers. The attacker then used those stolen credentials to access Uber's account with the service provider. source
Through: Fireworks AI Fireworks AI, a third-party technology provider source · 2 organisations hit through Fireworks AI →
Way in: service provider The breach began on Oct. 7, 2026, when an unauthorized third party gained access to the internal login credentials belonging to one of Uber's service providers. The attacker then used those stolen credentials to access Uber's account with the service provider. source

What changed since it was first reported

13 November 2026 Confirmed breach, 7,870 residents (claimdepot)
14 November 2026 Confirmed breach, 7,870 people (腾讯网)

What the letter says

Found: On October 13, 2026, our investigation determined that the unauthorized party had used the compromised credentials to access Uber data connected to the service provider.
Began: On October 9, 2026, a service provider notified Uber that an unauthorized third party had compromised the service provider's internal credentials
People: This incident affected approximately 1,873 Rhode Island residents.
Exposed: the personal information involved in the incident included <<data elements>>
Offered: We are providing you with access to credit monitoring and fraud assistance at no charge. These services provide you with alerts for <<time>> months from the date of enrollment when changes occur to your credit file. In addition, we are providing you with proactive fraud assistance

Got a letter or email about this breach? Check it is real →

Read the letter (PDF), as filed with the California Attorney General.

Sources 13

Show all 13 sources

News reportclaimdepotUber Data Breach Exposes Driver's License Info of Thousands11 November 2026 · 7,870 residents
Confirmed by Uber Technologies Inc.: Uber Technologies Inc. , which operates a global technology platform connecting consumers with transportation, delivery and other services, has disclosed a data breach
News reportCyber Security NewsUber Confirms Data Breach – Hackers Stole Users’ Personal Information13 November 2026 · 7,870 drivers
Confirmed by Uber: Uber has confirmed a data breach
News reportCiberSeguridad LatamUber confirms that cybercriminals stole driving license data from thousands of drivers through an AI provider (our translation from Spanish)14 November 2026
Confirmed by Uber: Uber confirma
News reportgagadgetUber data leak: driver's license numbers of drivers stolen (our translation from German)13 November 2026
News reportTencent.comUber confirms third-party supplier leaked thousands of driver license information (our translation from Chinese)13 November 2026 · 7,870 people
News reportCryptopolitanUber says AI supplier was breached, US driver license information leaked (our translation from Chinese)13 November 2026 · 7,870 drivers
News reportunnUber reports the theft of driver's license data in the USA due to information leak (our translation from Ukrainian)13 November 2026 · 1,873 residents
News reportGizmodoHackers Stole Thousands of Uber Drivers’ Data Through an AI Startup13 November 2026
News reportZN.uaAt least 7,870 people were affected: Uber reported a driver data breach (our translation from Ukrainian)14 November 2026 · 7,870 people

Official notices are read by code from the regulator’s own register. News reports are read by an AI model; every fact taken from an article was checked word for word against it, and anything it could not find was dropped. More notices to California, Vermont, Texas, Iowa. · Corrections and changes

If Uber Technologies had your data

Look for Uber Technologies, Inc.’s own notice or letter: it should say what of yours was involved. Keep it.
An ID number cannot be changed, so lock it: a credit freeze or fraud alert in the US, a credit warning (kreditadvarsel) on borger.dk in Denmark, Cifas protective registration in the UK.
Your home address is out: be wary of letters, parcels or visitors that mention Uber Technologies, Inc., and of texts asking for a “delivery fee”.
Expect scams that use your details: calls, texts or emails pretending to be Uber Technologies, Inc., your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

Use Uber Technologies? Hear first next time

Breach Radar tells you when a company you use is breached, and what to do. Free, and your list stays on your phone.

Download on the App Store

Earlier breaches at Uber Technologies

From the official registers’ and Have I Been Pwned’s full histories. A name match: check the notice to be sure it is the same company.

21 November 2017 California Attorney General · began 13 October 2016
21 November 2017 Washington Attorney General · 10,888 Washington residents
16 June 2016 Washington Attorney General · 1,355 Washington residents
27 February 2015 California Attorney General · began 13 May 2014

Questions about the Uber Technologies breach

Was Uber Technologies hacked?

What data was exposed in the Uber Technologies breach?

Social Security numbers, Driver’s license numbers, Government ID numbers, Dates of birth, Names and Addresses, by the notices and reports on this page.

How do I know if I was affected?

Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. The letter it filed is on this page. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.

Is there a Uber Technologies data breach settlement?

No settlement open for claims is on record for Uber Technologies as of 15 November 2026. A settlement usually comes a year or more after a breach, if a court approves one. Every open settlement is listed with its deadline.

Is a letter, email or text about the Uber Technologies breach real or a scam?

A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to Uber Technologies’s own site, or check the letter here.

More breaches in United States

Every breach in United States →

Data breach settlements open for claims

Not about Uber Technologies: settlements over other US data breaches that people can still claim money from.

La Jolla Group file by 23 November 2026
Baptist Health file by 8 December 2026
Lowe Engineers file by 13 January 2027

Every open settlement →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Accuracy audit · For journalists · Found a mistake? Tell us and we correct it.