Uber Freight is investigating a potential data security breach in which hackers accessed some of its systems according to Reuters.

A hacking group calling itself Helix claimed responsibility for an attack on the firm on 6 August, posting what it claimed were more than a million Uber Freight files onto its dark web site.

Uber Freight provides supply chain and logistics services for retailers and consumer goods enterprises, by connecting businesses with carriers and facilitating upfront pricing and goods tracking.

In that role, it stores operational and logistical data linked to partner organisations for up to three years.

Uber Freight spokesperson Sam Hallock told Reuters: “There has been "no impact to Uber Freight's business operations, which continue in the normal course without disruption.

“Our systems are ​secure and fully operational.”

Reuters noted that Hallock did not comment on whether Helix’s claimed files were legitimate or if Uber Freight has been in contact with the group.

In July, the cybersecurity firm ReliaQuest detailed Helix as “a multi-target data extortion campaign that uses vishing, device code phishing, and automated SharePoint exfiltration”.

It drew a link between the group and ShinyHunters, one of the driving forces behind the 2025 wave in cyber attacks on retailers.

The same month, Reuters connected the group to attacks on companies such as Blackstone, Bain Capital, and Moody’s.

Google Threat Intelligence Group (GTIG) has separately linked Helix to the cyber extortion groups, Blackfile, Falcon, Pink, and Redact noting overlaps in victims and use of vishing. At this stage, GTIG researchers said, it is not clear if this is because they are a coordinated group under multiple names, a single group that has fragmented into offshoots, or separate groups collaborating and outsourcing with one another.

---