Pennsylvania's attorney general is suing the ride-hailing company Uber, saying it broke state law when it failed to notify thousands of drivers for a year that hackers stole their personal information.
The lawsuit filed Monday in Philadelphia said hackers stole the names and drivers' license numbers of at least 13,500 Pennsylvania Uber drivers. It accuses Uber of violating a state law to notify victims of a data breach within a "reasonable time frame."
Uber acknowledged in November that for more than a year it covered up a hacking attack that stole personal information about more than 57 million customers and drivers. Pennsylvania's lawsuit seeks civil penalties in the millions of dollars.
Uber says it's taken steps to be accountable and is cooperating with Pennsylvania investigators. Washington state and Chicago have also sued Uber.
Explore further: Washington state sues Uber over data breach cover-up