Uber Freight investigating alleged cyber incident after hacker claims unauthorized access

Uber Freight said it is investigating a data security incident after claims from a hacker that the intruder gained unauthorized access to parts of the unit’s technology environment. In a statement provided to the media, an Uber Freight spokesperson said the company is reviewing the matter and working to determine what, if anything, was accessed or affected.

According to the spokesperson, the investigation centers on “a portion of [Uber Freight’s] systems and repositories,” suggesting the alleged activity may have involved internal storage or code and data libraries rather than customer-facing services. The statement did not provide additional technical details on the method of access, the timing of the incident, or how the company detected it.

The spokesperson also indicated that Uber Freight has not reported an impact, but the public description available in the report is incomplete and does not spell out the specific scope of “impact” being ruled out. Without further disclosure, it is not possible to confirm whether the incident affected operations, employee systems, customer transactions, or data specific to shippers and carriers.

Uber Freight operates a marketplace that connects shippers with trucking capacity, and it relies on internal systems to manage matching, routing, pricing, and communications. Cyber incidents in that kind of environment can create secondary risks, including disruptions to platform functions, exposure of operational data, or attempts to access credentials and internal tools.

In this case, the company’s immediate response appears to be focused on containment and assessment. Publicly available information from the report does not describe whether Uber Freight brought in outside security investigators, notified regulators, or issued alerts to affected business partners, which are steps companies sometimes take depending on the nature and reach of the incident.

For Uber, the logistics division is part of a broader platform business that processes large volumes of information across ride-hailing, delivery, and freight. While the statement is limited to Uber Freight, any confirmed intrusion involving repositories can also raise questions about the security posture of adjacent internal systems, including build pipelines, identity controls, and shared tooling.

The statement did not provide additional information on what the hacker claimed beyond the existence of unauthorized access, nor did it offer details about specific datasets or whether any stolen information was posted publicly. As a result, key questions remain open, including whether data was exfiltrated, whether any credentials were compromised, and whether any costs or service delays have already been recorded.

Investors and customers will likely be watching for additional updates on the investigation, including any clarification on the scope of systems involved, whether Uber Freight can rule out impact across customers or partners, and whether the company will disclose remedial actions or security changes as the review concludes.