Hackers accessed a GitHub coding site used by Uber software engineers and then used login credentials they obtained there to access data stored on an Amazon Web Services account. From there, the hackers discovered an archive of rider and driver information. Later, they emailed Uber asking for money to delete the data and keep the breach quiet. Uber says it has not seen evidence of fraud or misuse tied to the incident CEO Dara Khosrowshahi has blogged saying None of this should have happened”]
Source: https://grahamcluley.com/uber-hackers-paid-data-breach/