Uber 证实发生数据泄露事件，数千名美国司机受影响，此前黑客访问了存储在第三方技术供应商 Fireworks AI 处的个人信息，其中包括驾照详细信息。该公司正在通知受影响个人并提供免费信用监控服务，但尚未披露全国受影响人数总计。
Uber has confirmed a data breach involving thousands of US drivers after hackers accessed personal information stored with Fireworks AI, a third-party technology provider, including driver's licence details. The company is notifying affected individuals and offering free credit monitoring, but has not disclosed the total number of people affected nationwide.
据报告，Fireworks AI 于 2026 年 10 月 9 日告知 Uber，未经授权的一方已入侵内部凭证，Uber 因此得知此次泄露。被盗凭证使攻击者能够访问 Uber 在该供应商处的账户，并可能触及存储在 Uber 自有系统之外的记录。
The breach was reported to Uber on October 9, 2026, after Fireworks AI informed the company that an unauthorised party had compromised internal credentials. The stolen credentials enabled the attacker to access Uber's account with the vendor and potentially reach records stored outside Uber's own systems.
Uber 表示，公司立即切断了与该供应商的数据连接并启动调查。到 10 月 13 日，调查人员已确认攻击者访问了 Uber 数据，包括属于现正收到泄露通知人员的个人信息。发送给受影响个人的通知信日期为 11 月 10 日。
Uber said it immediately severed data connections with the provider and launched an investigation. By October 13, investigators had confirmed that the attacker accessed Uber data, including personal information belonging to people now receiving breach notifications. The notification letter sent to affected individuals is dated November 10.
Uber 泄露事件波及全美多州数千人州级披露提供了事件影响的初步图景。《网络安全新闻》引用的通知显示，马萨诸塞州有 2,567 人受影响，南卡罗来纳州有 3,430 人，罗德岛州约有 1,873 人。
Uber breach affects thousands across US statesState-level disclosures provide an initial picture of the incident's impact. Notices cited by Cyber Security News list 2,567 affected people in Massachusetts, 3,430 in South Carolina and approximately 1,873 in Rhode Island.
这三个州的数字合计为 7,870 人。该数字不代表全国总计，因为其他地方也已发出额外通知。
Together, the figures account for 7,870 people across the three states. The number does not represent the nationwide total, as additional notifications have been issued elsewhere.
《TechCrunch》援引州政府备案文件报道称，驾照信息属于被泄露记录之一。Uber 也向该媒体证实，Fireworks AI 是涉事的第三方供应商。此次泄露披露主要涉及司机。
TechCrunch reported that driver's licence information was among the compromised records, citing state filings. Uber also confirmed to the publication that Fireworks AI was the third-party vendor involved. The breach disclosures primarily concern drivers.
现有信息并未确定所有 Uber 乘客或客户账户均受影响。Fireworks AI 遭遇数据泄露，引发对第三方数据安全的担忧。该事件也引起了人们对企业依赖外部技术供应商处理或存储信息所带来的安全风险的关注。
The available information does not establish that all Uber riders or customer accounts were affected. Fireworks AI breach raises concerns over third-party data securityThe incident also draws attention to security risks associated with companies relying on external technology providers to process or store information.
据《网络安全新闻》报道，Fireworks AI 此前曾与涉及客户记录和数据集的泄露事件有关联。该供应商还处理过与另一起 Notion AI 聊天记录泄露事件相关的数据。
Fireworks AI was previously linked to disclosures involving customer records and datasets, according to Cyber Security News. The provider also handled data connected to a separate Notion AI chat transcript breach.
Notion 表示，受影响的客户工作区不足 1%，且其自身系统未遭入侵。这些事件涉及不同的客户和泄露情况；它们并未确立 Notion 数据或其他客户信息是通过 Uber 的泄露事件被访问的。Uber 为受影响司机提供信用监控服务Uber 表示，在发出通知信时，尚未发现泄露信息被滥用。公司正通过 TransUnion 旗下的 Cyberscout 为受影响个人提供免费信用监控和欺诈协助服务。
Notion said fewer than 1% of customer workspaces were affected and that its own systems had not been breached. The incidents involve separate customers and disclosures; they do not establish that Notion data or other customer information was accessed through Uber's breach. Uber offers credit monitoring to affected driversUber said it had not identified misuse of the compromised information when its notification letters were issued. The company is offering affected individuals free credit monitoring and fraud assistance through Cyberscout, a TransUnion company.
收件人须在 11 月 10 日通知信发出之日起 90 天内，使用通知中提供的激活码完成注册。
Recipients must enrol within 90 days of the November 10 letter using the activation code provided in their notification.
Uber 建议受影响司机查看账户对账单，留意可疑活动，并考虑采取额外防护措施，包括设置欺诈警报或信用冻结。
Uber has advised affected drivers to review their account statements, monitor for suspicious activity and consider additional safeguards, including fraud alerts or credit freezes.
联邦贸易委员会指出，信用冻结会限制对信用报告的访问，使得犯罪分子更难利用被盗个人信息开设新账户。
The Federal Trade Commission says a credit freeze restricts access to credit reports, making it harder for criminals to open new accounts using stolen personal information.
该公司尚未公开披露受影响司机的总人数，也未提供全国范围内泄露记录的细分情况。
The company has not publicly disclosed the full number of affected drivers or provided a nationwide breakdown of the compromised records.