Uber discovered this leak in September 2014, but waited more than five months to notify the affected individuals. An announcement in November 2017 revealed that in 2016, a separate data breach had disclosed the personal information of 600,000 drivers and 57 million customers.