Fireworks AI breach exposes client information
In October 2026, Fireworks AI, an AI service provider for Uber, was breached, leading to a leak of client information. The attacker stole the service provider’s internal credentials and used them to access Uber’s account with the provider. Uber is notifying US drivers that their personal information and driver’s license information were exposed.
Key facts
- Affected organization
- Fireworks AI
- Incident type
- Data breach
- Occurred / detected
- 2026-10
- Scale of damage
- Not confirmed
- Cause / method
- Theft of a service provider’s internal credentials followed by unauthorized access to a client account
- Location
- United States
If your data was exposed
Exposed dataID document copy
Timeline
- Uber’s information breach and its impact on 3,430 South Carolina residents became known.
- The Fireworks AI breach and how stolen internal credentials were used to access Uber’s account became known.
- It became known that Uber was notifying thousands of US drivers whose personal information and driver’s license information had been stolen in October 2026.
Also affected by this incident
Fireworks AI breach exposes license data of thousands of US Uber drivers
↳ Knock-on damage from the Fireworks AI incident · View original incident3.4KImpact: Personal information and driver's license data of thousands of US drivers, including 3,430 South Carolina residents
In October 2026, a breach at Uber vendor Fireworks AI resulted in the theft of personal information and driver's license data belonging to thousands of US drivers. The attacker stole the vendor's internal credentials and used them to access its associated Uber account. Uber is notifying those affected, including 3,430 South Carolina residents.
Related reports: 29 · last report →
4 related reports
- Arlington ISD personnel information affected by third-party national data breach
- MCPS suffers data breach through third-party education software - 6,000 individuals affected
- Missoula school district suffers data breach through third-party education software
- Expedia Confirms Cyberattack Through Third-Party Vendor
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.