Uber agrees to $148 million settlement with US States and the District of Columbia over massive 2016 data breach that exposed personal data of 57 million of its users. Hack happened in 2016, it was easy for hackers that obtained credentials from a private GitHub site used by the company development team. The hackers tried to blackmail Uber and demanded $100,000 from the company in exchange for avoiding publishing the stolen data. Rather than to notify the data breach to customers and law enforcement as is required by Californias data security breach notification law, the chief of information security Joe Sullivan ordered to pay the ransom.”]
Source: https://securityaffairs.co/wordpress/76587/security/uber-data-breach-settlement.html