The Pennsylvania Attorney General has filed a lawsuit against Uber over concealing a data breach from October 2016 .
Court documents showed that Pennsylvania attorney general Josh Shapiro filed a lawsuit on Monday morning against the ride-sharing company based in San Francisco, after it failed to notify users that the company suffered a massive data breach for more than 12 months.
The attackers accessed the information of 25 million users in the United States, 4.1 million of which were drivers. The stolen data included names, email addresses, phone numbers, and driver's license numbers. About 13,500 of them lived in Pennsylvania, according to the lawsuit.
The company paid the thieves $100,000 to get the data back . By failing to notify users in a timely manner, the lawsuit said, Uber violated multiple consumer protection laws, including the Personal Information Act.
This is a breaking news story, please continue to check for updates.