Uber found out when the hackers emailed the company and said they had acquired users’ personal information. Mr. Sullivan and other Uber employees negotiated a $100,000 payment and convinced the hackers to sign nondisclosure agreements. At the time, the Federal Trade Commission was investigating Uber in connection with a similar data breach that had occurred two years earlier. He also kept information about the incident from Uber employees who were responsible for communicating with the F.T.C. Uber did not disclose the breach until 2017, after its former chief executive, Travis Kalanick, was ousted by investors and replaced by Dara Khosrowshahi, Uber’s current chief.

Source: New York Times August 20, 2020 18:41 UTC