RUKUS.news

Uber says hackers stole thousands of drivers' license data in Fireworks AI breach

30h ← 3d

Summary

  • Uber is notifying thousands of drivers that hackers stole their personal and driver's license information in an October breach at its tech provider, identified as Fireworks AI.
  • Uber told attorneys general it was notified on October 9 that hackers stole the provider's internal credentials and used them to access Uber data.
  • Breach notices cite stolen driver's licenses of 2,567 people in Massachusetts, 3,430 in South Carolina, and 1,873 in Rhode Island; Illinois figures are pending.
  • Fireworks says hackers breached its cloud provider and took customers' billing data and datasets, including Notion AI chat transcripts affecting about 1% of Notion's customers.
  • Fireworks attributes the breach to a financially motivated group that aims to sell stolen tokens for accessing large language models.
  • It is Uber's second known data breach of the year, after an incident at its Uber Freight truck shipping unit.

Reactions

  • Fireworks said it identified unauthorized access to some of its systems that affected customer data, but did not answer further questions about the incident.
  • An Uber spokesperson deferred questions to Fireworks and did not say how many drivers were affected.
  • Notion disconnected its systems from Fireworks on November 3, deleted the data stored there, and stopped all connectivity between the two companies.
  • Notion said around 1% of its own customers were affected and that stolen data was largely unattributable to specific customers.
  • The number of affected drivers was forecast to rise as more data breach notifications arrive.

Timeline newest first

  1. Uber began notifying thousands of drivers that their personal and driver's license information was stolen in an October breach at its tech provider, identified as Fireworks AI.
  2. Uber told attorneys general it was notified on October 9 that hackers stole the provider's internal credentials and used them to access Uber's data.
  3. Breach notices showed stolen driver's license information of 2,567 people in Massachusetts, 3,430 in South Carolina, and 1,873 in Rhode Island.
  4. A Fireworks spokesperson confirmed unauthorized access to some of its systems affected customer data; an Uber spokesperson deferred questions to Fireworks.
  5. Fireworks AI confirmed a cyberattack exposed some customers' data, saying hackers breached its cloud provider and took billing information and some datasets.
  6. Notion said the Fireworks breach affected about 1% of its customers and that hackers took chat transcripts of Notion AI users of the Insights feature.
  7. Notion disconnected its systems from Fireworks AI on November 3, deleted the data stored there, and stopped all connectivity between the two.
  8. Notion announced on November 10 that part of its users' AI chat content had leaked, attributing it to a cyberattack on its partner Fireworks AI.

Sources newest first

  • Uber confirms hackers stole thousands of drivers' license information in data breach | TechCrunchtechcrunch.com· 30h

    Uber is notifying thousands of drivers that hackers stole their personal and driver's license information in an October breach at its tech provider, which TechCrunch reports is Fireworks AI. Breach notices cite 2,567 driver's licenses stolen in Massachusetts, 3,430 in South Carolina, and 1,873 in Rhode Island, and TechCrunch expects the number to rise.

  • Cyberattack on Fireworks AI allowed hackers to access Notion customers' chat transcripts | TechCrunchtechcrunch.com· 2d

    TechCrunch reports that a cyberattack on Fireworks AI, a platform for accessing open AI models, exposed some customers' data, including chat transcripts of Notion AI customers who used the Insights feature. Notion says around 1% of its customers were affected and cut all connections to Fireworks on November 3; Fireworks says it believes financially motivated hackers aim to sell access to large language models.

  • 米Notion、AIチャットの内容漏洩 連携企業へのサイバー攻撃で - 日本経済新聞nikkei.com· 3d

    Nikkei reports that the US workspace tool company Notion announced on the 10th that part of users' AI chat content had leaked, attributing it to a cyberattack on its AI partner Fireworks AI, whose unauthorized access it was notified of. Related coverage lists Japanese leaks at the Cabinet Office, Step Golf, YmirLink and others, quotes Notion's chief executive saying operating companies should hold data, and advises changing passwords and watching for scam emails.