The popular ride-hailing company Uber reached a $148 million settlement Wednesday afternoon with the 50 states and the District of Columbia for failing to quickly notify drivers that hackers had stolen their personal data, including driver’s license information.

Uber, according to a press release by the office of Connecticut Attorney General George Jepsen, learned that hackers had gained access to the information in 2016. While the company obtained assurances that the hackers deleted the information, Uber failed to report the breach to law enforcement or the affected drivers until November 2017, the press release says. The hacking affected about 600,000 drivers nationwide.