Uber Data Breach Exposes Driver's License Info of Thousands

Uber Technologies Inc., which operates a global technology platform connecting consumers with transportation, delivery and other services, has disclosed a data breach that occurred in early October 2026.

The breach began on Oct. 7, 2026, when an unauthorized third party gained access to the internal login credentials belonging to one of Uber's service providers. The attacker then used those stolen credentials to access Uber's account with the service provider.

On Oct. 9, 2026, the service provider detected the unauthorized activity and alerted Uber about the compromise.

By Oct. 13, 2026, an investigation into the incident confirmed that the unauthorized party had successfully used the compromised credentials to access Uber data connected to the service provider. The investigation concluded that the personal information of affected consumers was among the data that had been accessed during the incident.

The type of personal information exposed in this breach included driver's license information, according to the company's notification to consumers.

The incident has so far affected 3,430 South Carolina residents, 2,567 Massachusetts residents and 1,873 Rhode Island residents. The breach was additionally disclosed to attorney general of California. Uber began notifying affected consumers on Nov. 10, 2026.

Uber's response to the breach

Uber is offering complimentary credit monitoring and fraud assistance services through Cyberscout, a TransUnion company.

Affected consumers can enroll in the complimentary monitoring services by visiting mytrueidentity.com and entering the unique activation code included in their notification letter. Enrollment must be completed within 90 days of the date of the letter.

Uber has set up a dedicated phone line for affected individuals with questions or concerns about the incident. Individuals can reach the support line at 1-866-317-7961 between 8 a.m. and 8 p.m. Eastern time, Monday through Friday, excluding holidays.