https://www.cnet.com/news/uber-to-pay-148-million-for-failing-to-report-2016-hack/

Uber said it paid $100,000 to the data thieves at the time to delete the information. But the company didn't reveal any details about the hacker or how it paid him the money. It was later reported that a 20-year-old Florida man was responsible for the breach.

"I'm pleased that we've reached an agreement with the attorneys general," Tony West, Uber's chief legal officer, said in a statement. "The commitments we're making in this agreement are in line with our focus on both physical and digital safety for our customers."