Privacy Unpacked

Confirmed breach

Uber data breach

USUnited States · CA

NewsBytes and Habroshtein reported a data breach at Uber (CA, United States) on 14 November 2026, and it has been confirmed. It affected 7,873 drivers.

One of 2 organisations whose data was taken through Fireworks. The Fireworks breach →

People affected
7,873drivers
Reported
14 November 2026News report and 1 more

What was exposed 1

  • License information

How it happened

How
Hacking Hackers stole internal credentials, which they then used to access Uber's information source
Our translation from Russianхакеры похитили внутренние учётные данные, которые затем использовали для доступа к информации Uber
Through
Fireworks This contractor is the company Fireworks AI source · 2 organisations hit through Fireworks →
Our translation from Russianэтим подрядчиком выступает компания Fireworks AI

What changed since it was first reported

  1. Confirmed breach, 7,873 drivers (Хабр)

Sources 2

News reports are read by an AI model; every fact taken from an article was checked word for word against it, and anything it could not find was dropped. · Corrections and changes

Questions about the Uber breach

Was Uber hacked?

NewsBytes and Habroshtein reported a data breach at Uber (CA, United States) on 14 November 2026, and it has been confirmed. It affected 7,873 drivers. How it happened, by the sources: hacking, through Fireworks.

What data was exposed in the Uber breach?

License information, by the notices and reports on this page.

How do I know if I was affected?

Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.

Is there a Uber data breach settlement?

No settlement open for claims is on record for Uber as of 15 November 2026. A settlement usually comes a year or more after a breach, if a court approves one. Every open settlement is listed with its deadline.

Is a letter, email or text about the Uber breach real or a scam?

A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to Uber’s own site, or check the letter here.

More breaches in United States

  1. EZaccessMDreportedUSUnited States · 14 November 2026 Social Security numbersHealth and medical informationDates of birth+5 –not reported
  2. USA DeBuskUSUnited States · TX · 13 November 2026 Social Security numbersDriver’s license numbersGovernment ID numbers+6 11KTexas residents
  3. NTN Bearing Corporation of AmericaUSUnited States · 13 November 2026 Social Security numbers 1Vermont residents
  4. WalgreenUSUnited States · 20 February 2026 2Washington residents
  5. ICW Group HoldingsUSUnited States · 13 November 2026 –not reported

Every breach in United States →

Data breach settlements open for claims

Not about Uber: settlements over other US data breaches that people can still claim money from.

Every open settlement →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Accuracy audit · For journalists · Found a mistake? Tell us and we correct it.