The third-party provider first alerted Uber to the security issue on October 9, prompting an immediate investigation that confirmed the compromise of personal data four days later. Affected individuals reside across New York, Maryland, North Carolina, Pennsylvania, the District of Columbia, and Rhode Island. Uber stated that it has found no evidence indicating the stolen information has been misused so far. Impacted drivers have a 90-day window to enroll in complimentary credit monitoring provided via Cyberscout.
Key points
Uber severed data connections with the external vendor immediately after learning of the…: Uber severed data connections with the external vendor immediately after learning of the credential compromise.
Affected motorists span at least five states and the District of Columbia, with no misuse…: Affected motorists span at least five states and the District of Columbia, with no misuse detected yet.
Impacted individuals are being offered free credit monitoring and fraud assistance servic…: Impacted individuals are being offered free credit monitoring and fraud assistance services through Cyberscout.
Sources checked by our analysis pipeline: 1
Nov 13 : Uber said an unauthorized party used compromised credentials at a service provider to access its data, according to a notice posted on the California attorney general's website.
The notice, dated November 10, said the provider told Uber on October 9 that the credentials had been compromised and used to access Uber's account with the provider. Uber severed its data connections with the provider and opened an investigation.
On October 13, the investigation determined the party had used the credentials to access Uber data, and that the recipients' personal information was among the data accessed, the notice said.
The notice did not name the provider or list the data involved. TechCrunch reported on Friday that the provider was Fireworks AI and that the data included drivers' license information.
Uber and Fireworks AI did not immediately respond to Reuters requests for comment.
The notice said the incident affected about 1,873 Rhode Island residents. It also carried instructions for residents of the District of Columbia, Maryland, North Carolina, New York and Pennsylvania.
Routine automated checks inadvertently knocked servers offline, triggering an infrastructure overload that severed critical Microsoft 365 services across more than 70 countries. The widespread disruption crippled government agencies, judicial operations, and commercial communications for nearly an entire day. This systemic failure has intensified scrutiny from experts regarding the vulnerabilities of concentrating critical global infrastructure within a few dominant technology firms.
Weighing only 1.5 ounces, the new CS-8 Micro introduces an ultra-portable design to Camp Snap's vintage-inspired line while trading high video fidelity for pocket convenience. Unlike previous screenless devices from the brand, it adds a dedicated electronic viewfinder, though users must still transfer files to an external computer or smartphone to view their clips. This launch aims to capture the nostalgia market through a blind-box distribution model with low-friction retro video recording.
The open-source office suite project released a direct public statement emphasizing that its software operates without interruption year-round. This public communication underscores the platform's continuous operational availability for its global user base.