A yearlong delay in notifying its drivers that their personal information was stolen by hackers will cost Uber $148 million, according to a settlement reached by the ride-sharing service and all 50 states and the District of Columbia.

Uber was widely admonished last year when it revealed that not only did it hide the breach but it paid a $100,000 ransom through its bug bounty program to a 20-year-old Florida man to destroy data and keep the hack a secret. Read more.