Two employees who dealt with the aftermath of the breach have been sacked amid reports the hackers were paid $100,000.
Hackers stole data belonging to 57 million Uber users in 2016 – but the company kept it quiet, its boss has admitted.
The ride-hailing app’s chief executive, Dara Khosrowshahi, said two hackers had managed to download “personal information of 57 million users around the world”.
Names, email addresses and mobile phone numbers were among the details stolen.
According to Bloomberg News, the embattled company paid the hackers $100,000 to delete the data and keep quiet, instead of notifying regulators and the people affected.
The names and driving license numbers of about 600,000 Uber workers in the US were also compromised in the October 2016 incident.
Uber says it does not believe its customers need to take any action.
“We have seen no evidence of fraud or misuse tied to the incident,” says a help page on its site.
“We are monitoring the affected accounts and have flagged them for additional fraud protection.”