Uber has agreed to pay $148 million and take steps to tighten data security, after the ride-hailing company failed for a year to notify drivers that hackers had stolen their personal information.
Illinois Attorney General Lisa Madigan announced the settlement Wednesday between Uber Technologies Inc. and all 50 states and the District of Columbia.
"Uber completely disregarded Illinois' breach notification law when it waited more than a year to alert people to a serious data breach," Madigan said.
Madigan said that although Uber is now taking appropriate steps, "the company's initial response was unacceptable. Companies cannot hide when they break the law."
