SEATTLE – Washington state is suing the ride-hailing company Uber, saying it broke state law when it failed to notify more than 10,000 drivers in the state that their personal information was accessed as part of a major data breach.
Uber acknowledged last week that for more than a year it covered up a hacking attack that stole personal information about more than 57 million of the ride-hailing service’s customers and drivers.
Attorney General Bob Ferguson said Tuesday that because the drivers’ information that was accessed included names and license numbers, state law required Uber to notify them within 45 days. Nearly 11,000 drivers in Washington were affected.
Ferguson’s lawsuit seeks civil penalties in the millions of dollars.
In a statement Tuesday, Uber said it takes the matter seriously and is cooperating with regulators.
Subscribe to the Morning Review newsletter
Get the day's top headlines delivered to your inbox every morning by subscribing to our newsletter