HARRISBURG, Penn.—The state of Pennsylvania has filed a lawsuit against Uber for allegedly violating the state's mandatory breach notification law.
The state's data breach law, which went into effect in 2006, requires companies to notify those affected within a "reasonable" amount of time, according to Pennsylvania Attorney General Josh Shapiro.
It is the first time Pennsylvania has sued under the statute on behalf of consumers. The lawsuit also alleges Uber violated Pennsylvania's Unfair Trade Practices and Consumer Protection Law. At least 13,500 Uber drivers in Pennsylvania were affected. The state could seek $1,000 for each violation, meaning Uber could face a maximum civil penalty of up to $13.5 million, Bank Info Security reported.
As CUToday.info reported, Uber disclosed last November that hackers accessed 57 million accounts of its riders and drivers worldwide around October 2016.
"That's just outrageous corporate misconduct, and I'm suing to hold them accountable and recover for Pennsylvanians," stated Shapiro.