Uber正在警告司机，黑客从其一家供应商处窃取了他们的个人信息和驾照信息，TechCrunch报道称。TechCrunch将该供应商确定为Fireworks AI，Uber予以了确认。
Uber is warning drivers that hackers stole their personal and driver’s licence information from one of its vendors, TechCrunch reported. TechCrunch identified the vendor as Fireworks AI, and Uber confirmed it.
Uber表示，Fireworks于10月9日告知其，黑客窃取了内部凭据。TechCrunch称，这些凭据随后被用来访问Uber的数据。
Uber said Fireworks told it on 9 October that hackers had stolen internal credentials. Those credentials were then used to reach Uber’s data, TechCrunch said.
Uber尚未说明受影响的人数。本周其向州检察长提交的通知中，列出了马萨诸塞州2567人、南卡罗来纳州3430人和罗得岛州1873人。
Uber has not said how many people were affected. Notices it filed with state attorneys general this week list 2,567 people in Massachusetts, 3,430 in South Carolina and 1,873 in Rhode Island.
目前已有7870人。加利福尼亚州和伊利诺伊州居民也收到了通知，但未给出人数，因此总数可能会上升。
That is 7,870 so far. California and Illinois residents were also notified, without a count, so the total is likely to rise.
Fireworks在7月估值为175亿美元，向开发者出售开放AI模型的访问权限。该公司披露了10月的两起事件。第一起中，入侵者滥用了内部凭据。第二起中，他们通过云服务提供商的一次泄露事件，访问了其开发机器。
Fireworks, valued at $17.5bn in July, sells developers access to open AI models. It has disclosed two incidents from October. In the first, intruders misused internal credentials. In the second, they reached its development machines through a breach at a cloud provider.
Fireworks称，攻击者窃取了账单数据。对于部分客户，他们还窃取了机密、数据集和未完成的模型权重。Notion表示，其不到1%的工作空间中的AI聊天记录被泄露。
Fireworks says the attackers took billing data. For some customers, they also took secrets, datasets and unfinished model weights. Notion has said AI chat transcripts from fewer than 1% of its workspaces were exposed.
Fireworks将责任归咎于一个以牟利为目的出售被盗AI模型访问权限的团伙。这种做法被称为LLMjacking，将AI凭据变成一种产品。
Fireworks blamed a group that sells stolen access to AI models for profit. That practice, known as LLMjacking, turns AI credentials into a product.
目前不清楚驾照数据为何会出现在一家AI推理服务提供商处。Uber将其他问题转交给Fireworks，而Fireworks没有回答TechCrunch的具体问题。
It is unclear why driver licence data sat with an AI inference provider. Uber referred other questions to Fireworks, which did not answer TechCrunch’s specific questions.
这是Uber今年已知的第二起泄露事件，此前发生在8月的Uber Freight事件。目前没有团体声称对Fireworks的窃取行为负责。
It is Uber’s second known breach this year, after an Uber Freight incident in August. No group has claimed the theft from Fireworks.