Uber has reached a $148 million settlement with the 50 US states and the District of Columbia for violating data breach reporting laws in its cover-up of a massive hack in 2016.
California led the nationwide settlement case following its own investigation of Uber's handling of the breach, where the ride-sharing company paid a hacker $100,000 to stay mum about the breach rather than alerting the more than 174,000 Uber drivers in California about the exposure of their information, including drivers' license numbers. The hack exposed data on some 57 million users nationwide.
Uber ultimately went public about the breach in November 2017. The settlement will be dispersed among the states and DC, and follows a previous settlement agreement with the Federal Trade Commission in April.