Uber Freight probes data breach claim by Helix hackers

Uber Freight is investigating a claimed data breach after the Helix hacking group took credit for stealing files from the logistics company. A spokesperson for Uber Freight told Reuters that business operations were unaffected and systems were running normally. The company did not immediately respond to TechCrunch's questions.

On its data leak site, Helix said it took mailboxes, cloud storage drives, accounts payable files and dispatch documents from Uber Freight. Some files seen by TechCrunch appear to show email correspondence between Uber Freight and several customers, dated around mid-June 2026, but their authenticity could not be immediately verified.

Helix has targeted transportation companies, financial giants and private equity firms throughout 2026, exfiltrating large amounts of cloud data and threatening to publish it unless a ransom is paid. Google said in an August 2026 blog post that Helix is part of a wider collective it tracks as UNC6671, which relies on social engineering tactics like voice phishing — calling IT help desks to reset employee passwords.

Google's review of the gang's bitcoin wallets shows at least $10.6 million in ransom payments between January and May 2026. Uber Freight has not said whether it received correspondence from the hackers or paid a ransom. Security researchers have long warned that these crude but effective attacks trick humans into granting access to sensitive systems.