Fireworks AI breach exposes client information
In October 2026, Fireworks AI, an AI service provider for Uber, was breached, leading to a leak of client information. The attacker stole the service provider’s internal credentials and used them to access Uber’s account with the provider. Uber is notifying US drivers that their personal information and driving licence information were exposed.
Key facts
- Affected organisation
- Fireworks AI
- Incident type
- Data breach
- Occurred / detected
- 2026-10
- Scale of damage
- Not confirmed
- Cause / method
- Theft of a service provider’s internal credentials followed by unauthorised access to a client account
- Location
- United States
If your data was exposed
Exposed dataID document copy
Timeline
- Uber’s information breach and its impact on 3,430 South Carolina residents became known.
- The Fireworks AI breach and how stolen internal credentials were used to access Uber’s account became known.
- It became known that Uber was notifying thousands of US drivers whose personal information and driving licence information had been stolen in October 2026.
Also affected by this incident
Fireworks AI breach exposes licence data of thousands of US Uber drivers
↳ Knock-on damage from the Fireworks AI incident · View original incident3.4kImpact: Personal information and driving licence data of thousands of US drivers, including 3,430 South Carolina residents
In October 2026, a breach at Uber supplier Fireworks AI led to the theft of personal information and driving licence data belonging to thousands of US drivers. The attacker stole the supplier's internal credentials and used them to access its associated Uber account. Uber is notifying those affected, including 3,430 South Carolina residents.
Related reports: 29 · last report →
4 related reports
- Arlington ISD personnel information affected by third-party national data breach
- MCPS suffers data breach through third-party education software - 6,000 individuals affected
- Missoula school district suffers data breach through third-party education software
- Expedia Confirms Cyberattack Through Third-Party Vendor
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.