--- title: Uber Freight reportedly investigating after hacking... description: An extortion gang known as Helix, tracked by Google as part of the broader UNC6671 collective, has claimed responsibility for a cyberattack on Uber Freight,... canonical: https://daily.dev/posts/uber-freight-reportedly-investigating-after-hacking-group-claims-data-breach-mjxmtbbmx twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Uber Freight reportedly investigating after hacking group claims data breach | daily.dev og:description: An extortion gang known as Helix, tracked by Google as part of the broader UNC6671 collective, has claimed responsibility for a cyberattack on Uber Freight,... og:url: https://daily.dev/posts/uber-freight-reportedly-investigating-after-hacking-group-claims-data-breach-mjxmtbbmx og:image: https://api.daily.dev/og/posts/mjXMTBbmx.png og:image:alt: Uber Freight reportedly investigating after hacking group claims data breach og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Uber Freight reportedly investigating after hacking group claims data breach **[TechCrunch](https://daily.dev/sources/tc)** · 2 min read · 0 upvotes · 0 comments ## Summary An extortion gang known as Helix, tracked by Google as part of the broader UNC6671 collective, has claimed responsibility for a cyberattack on Uber Freight, Uber's logistics subsidiary. Uber Freight says it is investigating and that business operations remain unaffected. The hackers claim to have stolen mailboxes, cloud storage data, accounts payable files, and dispatch documents, and have posted samples—dated around mid-June—on their leak site. Helix has targeted transportation, financial, and private equity firms throughout the year using voice phishing against IT helpdesks to reset employee passwords and gain access. Google estimates the group has collected at least $10.6 million in ransom payments between January and May. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What tactics does the Helix hacking group use to breach company networks? Helix relies primarily on voice phishing, calling IT helpdesks and requesting password resets for employee accounts to gain unauthorized access. Google tracks this group as part of a larger collective called UNC6671, which has targeted transportation companies, financial firms, and private equity firms. Despite being described as crude, these social engineering tactics have proven highly effective at tricking staff into granting system access. _Security teams hardening helpdesk verification processes can follow breach reporting like this on daily.dev._ ### How much money has the Helix extortion group made from ransom payments? Google's review of the group's bitcoin wallets found at least $10.6 million in ransom payments collected between January and May of the reported year. The group, tracked as part of the UNC6671 collective, exfiltrates large volumes of data from victims' cloud environments and threatens to publish it unless a ransom is paid. Uber Freight is among its more recent targets, alongside other transportation and financial firms. _Anyone tracking ransomware economics and extortion trends can follow ongoing coverage on daily.dev._ ## Similar posts on daily.dev - ['Several dozen' orgs targeted by a new extortion crew](https://daily.dev/posts/several-dozen-orgs-targeted-by-a-new-extortion-crew-hwkvov6ma) · The Register · 0 upvotes · 0 comments - [OnTrac notifies customers of data breach after network hack](https://daily.dev/posts/ontrac-notifies-customers-of-data-breach-after-network-hack-0urdjm2ei) · BleepingComputer · 0 upvotes · 0 comments - [US cargo tech company publicly exposed its shipping systems and customer data to the web](https://daily.dev/posts/us-cargo-tech-company-publicly-exposed-its-shipping-systems-and-customer-data-to-the-web-fusdwhii0) · TechCrunch · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#ransomware](https://daily.dev/tags/ransomware), [#data-breach](https://daily.dev/tags/data-breach), [#uber](https://daily.dev/tags/uber) [View this post on daily.dev](https://daily.dev/posts/uber-freight-reportedly-investigating-after-hacking-group-claims-data-breach-mjxmtbbmx) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Uber Freight reportedly investigating after hacking group claims data breach","url":"https://daily.dev/posts/uber-freight-reportedly-investigating-after-hacking-group-claims-data-breach-mjxmtbbmx","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/uber-freight-reportedly-investigating-after-hacking-group-claims-data-breach-mjxmtbbmx"},"datePublished":"2026-08-12T17:20:04.943Z","dateModified":"2026-08-12T17:20:53.976Z","description":"An extortion gang known as Helix, tracked by Google as part of the broader UNC6671 collective, has claimed responsibility for a cyberattack on Uber Freight,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/701d78ccd6e19bfc26fb244297628c10?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/701d78ccd6e19bfc26fb244297628c10?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"TechCrunch","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"TechCrunch","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/tc","url":"https://daily.dev/sources/tc"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/uber-freight-reportedly-investigating-after-hacking-group-claims-data-breach-mjxmtbbmx","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,ransomware,data-breach,uber","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"TechCrunch","item":"https://daily.dev/sources/tc"},{"@type":"ListItem","position":3,"name":"Uber Freight reportedly investigating after hacking group claims data breach"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/uber-freight-reportedly-investigating-after-hacking-group-claims-data-breach-mjxmtbbmx#faq","mainEntity":[{"@type":"Question","name":"What tactics does the Helix hacking group use to breach company networks?","acceptedAnswer":{"@type":"Answer","text":"Helix relies primarily on voice phishing, calling IT helpdesks and requesting password resets for employee accounts to gain unauthorized access. Google tracks this group as part of a larger collective called UNC6671, which has targeted transportation companies, financial firms, and private equity firms. Despite being described as crude, these social engineering tactics have proven highly effective at tricking staff into granting system access. Security teams hardening helpdesk verification processes can follow breach reporting like this on daily.dev."}},{"@type":"Question","name":"How much money has the Helix extortion group made from ransom payments?","acceptedAnswer":{"@type":"Answer","text":"Google's review of the group's bitcoin wallets found at least $10.6 million in ransom payments collected between January and May of the reported year. The group, tracked as part of the UNC6671 collective, exfiltrates large volumes of data from victims' cloud environments and threatens to publish it unless a ransom is paid. Uber Freight is among its more recent targets, alongside other transportation and financial firms. Anyone tracking ransomware economics and extortion trends can follow ongoing coverage on daily.dev."}}]} ```