web3: Hacker Group Claims to Have Infiltrated Uber Freight and Stolen Internal Documents

CoinWorld reports:

The hacker and ransomware group Helix claims to have infiltrated Uber's logistics business, Uber Freight, and obtained a batch of internal documents. This incident once again highlights that shipping and freight companies are becoming prime targets for cybercriminals. Both Reuters and TechCrunch have reported on this claim.

Helix Claims to Have Stolen Various Internal Documents

According to information released by Helix on dark web leak sites, the stolen data includes emails, cloud storage drives, accounts payable documents, and scheduling documents. This type of information covers both financial and operational aspects and is typically used to pressure the victimized companies.

TechCrunch stated that it reviewed some documents allegedly from this incident, including email correspondence between Uber Freight and some clients. The timestamps on these documents can be traced back to mid-June, but their authenticity has not been independently verified.

If these materials are genuine, the impact may extend beyond Uber Freight itself. The leakage of information related to client accounts and business dealings could pose subsequent risks to partners as well.

Uber Freight Claims Business Operations Are Normal

Uber Freight told Reuters that this incident has not affected the company's business operations, and related systems are currently functioning normally. The company did not respond to further inquiries from TechCrunch.

So far, Uber Freight has not confirmed whether it has received a ransom demand or if it has had any contact with the hackers. Reports indicate that companies typically assess the extent of data leakage early in the incident before deciding what to disclose publicly.

Google Links Helix to UNC6671

Google stated this week that Helix is part of a larger hacker network it tracks, known as UNC6671. This label covers multiple related ransomware operations and explains why the group has targeted various industries, including transportation, finance, and private equity.

Google also mentioned that a review of related Bitcoin wallets shows that this hacker network obtained at least $10.6 million in ransom between January and May 2026.

Unlike those relying on complex malware or system vulnerabilities, Helix is said to employ more "voice phishing" techniques. Attackers directly call corporate IT service desks, impersonating employees to request password resets. This method has a low technical barrier but often targets weak points in manual processes.

For the logistics industry, which relies on scheduling, settlement, and customer collaboration, such incidents again expose the security pressures on internal support processes. Even well-resourced large enterprises may face breaches due to failures in human processes.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.