Pennsylvania Attorney General Josh Shapiro announced Monday that his office is suing the ride sharing company Uber after they failed to disclose a breach that impacted Pennsylvania Uber drivers.
Shapiro says nearly 13,500 drivers were affected by the 2016 data breach. According to a press release from Shaprio’s office, the first and last names of drivers as well as their drivers’ license numbers were stolen by hackers.
Uber publicly disclosed the breach last November, but Shapiro says the company “hid the incident for over a year,” which he believes is a violation of the state’s Breach of Personal Information Notification Act.
The Attorney General’s legal team could potentially seek civil penalties as high as $13.5 million from Uber.
