https://www.theguardian.com/technology/2018/sep/26/uber-hack-fine-driver-data-breach

Failure to report 2016 data breach ‘one of the most egregious cases we’ve ever seen’, says Illinois attorney general

Uber will pay $148m and tighten data security after the ride-hailing company failed for a year to notify drivers that hackers had stolen their personal information, according to a settlement announced Wednesday.