Pennsylvania Attorney General Josh Shapiro is suing Uber after the company failed to disclose a 2016 data breach for more than a year.
The hack, which took place in October 2016, wasn't disclosed until November 2017 and exposed the information of an estimated 25 million users in the U.S.
Shapiro says Uber broke Pennsylvania law by taking so long to tell drivers and customers about the breach.
Uber told Engadget it's reached out to Shapiro and wants to cooperate, though it disputes some of the characterizations in the lawsuit.
