The personal information of thousands of Uber drivers has been compromised by hackers.
The ride-hailing company recently filed security breach notices with several state attorneys general detailing the incident.
According to a notice dated Nov. 10 filed with California’s attorney general, a third-party service provider notified Uber on October 9 that hackers had stolen its internal credentials and used them to access Uber’s account with the provider.
On October 13, Uber determined that the hackers had accessed its data, including personal information belonging to drivers.
TechCrunch reports that the stolen data included driver’s license information. Uber has not disclosed how many drivers were affected nationwide, but state notices provide some idea of the scope of the breach.
The California notice letters state that approximately 1,873 Rhode Island residents were affected. South Carolina’s Department of Consumer Affairs lists another 3,430 affected residents. Meanwhile, TechCrunch reports, citing notices it reviewed, that 2,567 people in Massachusetts also had their information stolen. That brings the total to at least 7,870 people across just three states.
Uber confirmed to Gizmodo in an emailed statement that the compromised provider was Fireworks AI, a startup that helps developers access and use open AI models.
Fireworks first disclosed its own breach in October but provided an update earlier this week.
