Latest. Uber is notifying thousands of its drivers that their personal and driver licence information was stolen in the October breach at Fireworks AI, TechCrunch reported on Friday. Uber said the provider notified it on October 9 that hackers had stolen internal credentials and used them to reach Uber data held by the provider; notices filed with state attorneys general put the affected counts at 2,567 people in Massachusetts, 3,430 in South Carolina and 1,873 in Rhode Island, with Illinois and California counts not yet stated, and the total expected to rise as more notices are filed. It is Uber’s second known breach this year, after an extortion gang took credit for stealing data from its Uber Freight unit.
An attacker breached Fireworks AI’s cloud provider to gain access to a Fireworks development system, taking customers’ billing information and some datasets, the company confirmed in a security advisory reported by TechCrunch on Thursday. Notion, a confirmed affected customer, said the hackers took chat transcripts of Notion AI customers who used its Insights feature, affecting around 1 percent of its customers, though much of the data was unattributable; Notion said Fireworks alerted it to the incident, and that it disconnected its systems from Fireworks on November 3, deleted the data stored there and stopped all connectivity between the two. Fireworks said it believes the hackers are financially motivated, focused on selling access tokens for large language models, and the incident is its second breach in as many months after one in October.