Uber Freight Confirms Cyber Breach: 1M Files Compromised

Uber Freight confirmed a significant cybersecurity incident on Wednesday after the hacker group Helix claimed to have stolen nearly one million files from the digital freight platform. While Uber Freight stated the breach was identified, contained, and remediated with law enforcement engagement, the company has not disclosed which data repositories were accessed or whether customer, carrier, employee, or vendor information was compromised. This opacity creates substantial uncertainty in the supply chain community about the true operational and reputational impact.

Google Threat Intelligence researchers have linked Helix to the broader UNC6671 activity cluster, which has increasingly targeted transportation, technology, and hospitality sectors since June. The threat actors typically use social engineering—impersonating corporate help desks through phone calls and fake login portals—to capture employee credentials and multi-factor authentication tokens, enabling deep system penetration and data exfiltration. The shift in targeting toward logistics and transportation indicates a strategic focus on supply chain infrastructure that holds sensitive shipping, pricing, carrier, and payment data.

For supply chain professionals, this incident underscores critical vulnerabilities in digital freight platforms where operational data, financial information, and supplier details converge. The lack of transparency from Uber Freight about affected data types and customer notification timelines creates operational blind spots and regulatory compliance questions. This breach reinforces the need for comprehensive cyber risk assessments, supply chain partner vetting on security posture, and contingency planning for critical logistics service disruptions.