09:47Machine-translated from Azerbaijani by AIRead in Azerbaijani
Personal Data of 7,870 Uber Drivers Stolen, Number Could Rise
Uber has notified thousands of drivers that their personal and driver’s license information was stolen. The company disclosed the incident in notices sent to US state attorneys general. Fireworks AI said on October 9 that system access credentials had fallen into the hands of hackers. On October 13, Uber discovered that the drivers’ information had also been accessed.
In Massachusetts, 2,567 people were affected. The information of 3,430 residents in South Carolina and 1,873 residents in Rhode Island was stolen. The total confirmed number across these 3 states is 7,870. The number of affected drivers in California has not been disclosed. The final figure for Illinois is still being calculated. The total number across the US is expected to rise. Fireworks AI first released information about the incident in October. The stolen data includes customer accounts, payment information, some confidential databases and unfinished artificial intelligence models. The company believes the attack is linked to a group seeking to make money and using the “LLMJacking” method. Under this method, credentials for accessing artificial intelligence models are stolen and then used or sold to others. Notion also confirmed that some customer data was obtained during the same attack. The stolen data includes artificial intelligence conversations that do not identify users. The incident affected less than 1% of workspaces. Fireworks AI said a separate vulnerability in its cloud service was exploited to access systems where applications are developed. Law enforcement agencies and Palo Alto Networks’ Unit 42 division have joined the investigation. Uber cut its data connection with Fireworks AI as soon as it learned of the incident. The company has not yet found evidence that the stolen information has been misused. Drivers were advised to monitor their bank accounts and credit reports for suspicious transactions. Those affected can receive free credit monitoring and fraud assistance through Cyberscout. They have been given 90 days to enroll.
Uber drivers upload a valid driver’s license, insurance documents and proof of address to the platform. Bank statements and payment information are also stored in the system. In June, the company expanded its account verification rules based on drivers’ backgrounds and information available from public sources. According to outside estimates, more than 10 million drivers and couriers work on the platform. This is the second data breach at Uber to come to light this year. In August, a hacker group claimed to have stolen approximately 1 million files from the systems of Uber Freight, the company’s logistics division. Although the division confirmed unauthorized access to some systems, it did not verify the claim regarding the number of files. The group, which threatened to release the data, had claimed responsibility for the attack.
In Massachusetts, 2,567 people were affected. The information of 3,430 residents in South Carolina and 1,873 residents in Rhode Island was stolen. The total confirmed number across these 3 states is 7,870. The number of affected drivers in California has not been disclosed. The final figure for Illinois is still being calculated. The total number across the US is expected to rise. Fireworks AI first released information about the incident in October. The stolen data includes customer accounts, payment information, some confidential databases and unfinished artificial intelligence models. The company believes the attack is linked to a group seeking to make money and using the “LLMJacking” method. Under this method, credentials for accessing artificial intelligence models are stolen and then used or sold to others. Notion also confirmed that some customer data was obtained during the same attack. The stolen data includes artificial intelligence conversations that do not identify users. The incident affected less than 1% of workspaces. Fireworks AI said a separate vulnerability in its cloud service was exploited to access systems where applications are developed. Law enforcement agencies and Palo Alto Networks’ Unit 42 division have joined the investigation. Uber cut its data connection with Fireworks AI as soon as it learned of the incident. The company has not yet found evidence that the stolen information has been misused. Drivers were advised to monitor their bank accounts and credit reports for suspicious transactions. Those affected can receive free credit monitoring and fraud assistance through Cyberscout. They have been given 90 days to enroll. Uber drivers upload a valid driver’s license, insurance documents and proof of address to the platform. Bank statements and payment information are also stored in the system. In June, the company expanded its account verification rules based on drivers’ backgrounds and information available from public sources. According to outside estimates, more than 10 million drivers and couriers work on the platform. This is the second data breach at Uber to come to light this year. In August, a hacker group claimed to have stolen approximately 1 million files from the systems of Uber Freight, the company’s logistics division. Although the division confirmed unauthorized access to some systems, it did not verify the claim regarding the number of files. The group, which threatened to release the data, had claimed responsibility for the attack.