People who received a November 2026 “Notice of Security Incident” letter from Uber Technologies had personal information accessed by an unauthorized party that broke into one of Uber’s service providers. Uber is offering free credit monitoring; there is no lawsuit, settlement or claim form at this point.
What Happened?
Uber Technologies, Inc. reported a data breach to the California Attorney General on November 10, 2026, the same date as its notice letters, and listed October 7, 2026 as the date of the breach. According to the letter, a service provider told Uber on October 9, 2026 that an unauthorized third party had compromised the provider’s internal credentials and used them to get into Uber’s account with that provider.Uber says it cut off its data connections with the provider and opened an investigation. On October 13, 2026, it determined that the unauthorized party had used the stolen credentials to access Uber data connected to the service provider. Uber has not named the provider.
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
What Information Was Involved?
The sample letter Uber filed with California leaves the list of information as a placeholder that is filled in for each person, so the exact data varies by recipient. People who received a letter should check it for the information Uber says was involved in their case. Uber has not said how many people were notified or whether the people affected are riders, drivers, couriers or others.What Is Uber Offering?
Uber is providing credit monitoring and fraud assistance at no charge through Cyberscout, a TransUnion company. Each letter includes an activation code, and the letter says recipients must enroll within 90 days of the letter’s date. The length of the monitoring varies by letter. Uber says it has not identified any misuse of the data so far.Is There an Uber Data Breach Lawsuit?
OpenClassActions.com has not found a lawsuit over this incident as of November 13, 2026. Breach notices involving well-known companies are often followed by proposed class actions within weeks. If a suit is filed, it would take months or years to resolve, and any payment would come only from a court-approved settlement or judgment. There is no claim form or deadline now.Not the 2016 Uber Breach
This incident is separate from the 2016 Uber breach that the company disclosed in 2017, which led to settlements with state attorneys general. The November 2026 notices concern access through a service provider in October 2026.Questions
What happened in the Uber data breach?
Uber says a service provider told it on October 9, 2026 that an unauthorized party had compromised the provider’s internal credentials and used them to access Uber’s account with the provider. On October 13, 2026, Uber determined that the party had accessed Uber data connected to that provider.
What information was exposed in the Uber data breach?
It varies by person. The sample notice Uber filed with the California Attorney General fills in the data elements for each recipient, so people who got a letter should check it. Uber has not said how many people were notified.
Is Uber offering credit monitoring?
Yes. Uber is offering free credit monitoring and fraud assistance through Cyberscout, a TransUnion company. The letter includes an activation code and says recipients must enroll within 90 days of the letter’s date.
Is there an Uber data breach settlement?
No. As of November 13, 2026, OpenClassActions.com has not found a lawsuit over this incident, and there is no settlement, claim form or deadline.
Sources
- California Attorney General: Uber Technologies, Inc. breach report (breach date Oct. 7, 2026; reported Nov. 10, 2026), including Uber’s sample notice letter
