https://www.theverge.com/2017/11/21/16687796/uber-cyberattack-data-breach-exposed-users-57-million

Uber suffered a large-scale cyberattack in October of 2016 that exposed the confidential data of 57 million customers and drivers, the company disclosed today in a statement following a damning Bloomberg report. Among Uber’s faults include not only failing to disclose the hack, but in covering it up as well. Former CEO Travis Kalanick was informed of the attack just one month after it transpired, but it was not publicly announced and in fact was concealed by Chief Security Officer Joe Sullivan and his subordinates, the report says, leading Uber to fire the executive and one of his lieutenants this week.

The company allegedly paid its hackers a $100,000 ransom to delete the data and not publicize the breach to media or regulators. “None of this should have happened, and I will not make excuses for it,” current CEO Dara Khosrowshahi, who replaced Kalanick as chief exec back in September, writes in the company’s statement. “We are changing the way we do business.” Uber reportedly declined to identify the attackers.