Uber Technologies agreed to pay 148 million to settle multistate litigation that it violated data breach reporting and reasonable data security laws in connection with a 2016 breach of driver and customer data. Uber was accused of exposing 57 million users' data and paying hackers to cover up the breach rather than reporting it to proper authorities.