Uber Technologies, Inc. Data Breach Notice (Vermont Attorney General)

The government ID numbers of 1,071 people are now in the hands of unknown parties following a data breach at Uber Technologies, Inc. The Vermont Attorney General received notification of the incident on November 12, 2026.

Government ID numbers cannot be reissued like a credit card or password. Once they are exposed they remain permanently usable for identity theft, account takeover attempts, tax fraud, and other long-term impersonation schemes. This is the core risk created by the filing.

Government ID Numbers Do Not Expire

The record lists government ID numbers as the exposed category. No passwords, no financial account details, and no other credential material appear in the filing. That absence is meaningful: there is no evidence that any account login information was taken, and the record does not support claims that passwords need to be changed for this incident.

Because government identifiers are permanent, the exposure creates ongoing risk rather than a short-term problem that fades after a few months. Anyone whose government ID was included in this incident cannot simply wait for the danger to pass. The letter they receive from Uber will confirm exactly which records were involved.

How to Determine If You Are Affected

Uber is required to notify affected individuals directly, usually by mail. If you receive that letter, your government ID numbers were among those exposed. Absence of a letter usually means you were not in the affected group of 1,071 people. However, because the filing does not state when the incident occurred, anyone who has moved since then should contact Uber directly to confirm whether their records were included.

What This Exposure Enables

A government ID number combined with basic personal information is frequently enough for criminals to open new accounts, file fraudulent tax returns, or apply for government benefits in someone else’s name. These crimes can go undetected for years because the identifiers never change.

The filing does not disclose the root cause, whether the data was copied, or how many of the 1,071 records also contained supporting details such as name or date of birth. The record is limited to the categories named and the number of Vermont residents affected.

Practical Steps Specific to Government ID Exposure

• Place a fraud alert with the three major credit bureaus immediately. This forces lenders to verify your identity before opening new accounts and is the single most effective short-term control.
• Monitor your tax filings closely this season and every year after. Identity thieves often file returns early; catching a fraudulent filing quickly limits the damage.
• Review annual credit reports from Equifax, Experian, and TransUnion for accounts you did not open. Government ID exposure makes synthetic identity fraud more likely over time.
• Consider a credit freeze if you do not anticipate needing new credit soon. It blocks most new account attempts and can be lifted when required.
• Keep the letter from Uber and the filing reference number. They provide proof if you later need to dispute fraudulent activity tied to this incident.

The record establishes that government ID numbers belonging to 1,071 people were exposed in an incident reported on November 12, 2026. No further details about timing or method are provided. The letter you may receive remains the only definitive way to know whether your specific records were included.