Uber confirmed that the driver’s license information of thousands of drivers was exposed through a third-party vendor.

Crypto Briefing described the incident as a vulnerability at the vendor level, involving identity documents such as driver’s licenses rather than ordinary account fields. The source did not specify how many drivers were affected, name the vendor, or say when the exposure was discovered. It also did not say whether affected drivers had been notified.

· The risk stemmed from a third-party supply chain, not a direct entry point into Uber’s own systems—a point the report emphasized.
· Driver’s licenses contain verifiable identity information, and the response typically involves notification and reissuance, but the source did not disclose specific measures.

When a vendor suffers a data exposure, which matters more to you: how quickly people are notified or the process for getting a replacement driver’s license?