Uber disclosed a data breach affecting approximately 1,873 Rhode Island residents after an unauthorized party used compromised credentials at a third-party service provider to access company data. The incident also prompted notifications to residents of the District of Columbia, Maryland, North Carolina, New York, and Pennsylvania, according to a notice posted on the California Attorney General's website.

The notice, dated November 10, said the service provider informed Uber on October 9 that its credentials had been compromised and used to access Uber's account. The company disconnected its data connections with the provider and launched an investigation. Four days later, the investigation determined that the unauthorized party had accessed Uber data containing recipients' personal information.

The notice did not identify the service provider or specify which personal details were exposed. However, TechCrunch reported Friday that the provider was Fireworks AI and that the compromised information included driver's license data. Neither Uber nor Fireworks AI immediately responded to Reuters requests for comment.

Uber said it had not identified any evidence that the exposed information had been misused. The company is offering affected individuals free credit monitoring and fraud assistance through Cyberscout, a TransUnion company. Recipients have 90 days from the date of their notification letter to enroll in the services.