CHICAGO (AP) — Uber has agreed to pay $148 million and take steps to tighten data security, after the ride-hailing company failed for a year to notify drivers that hackers had stolen their personal information.

Illinois Attorney General Lisa Madigan announced the settlement Wednesday between Uber Technologies Inc. and all 50 states and the District of Columbia.

READ MORE: Driver Crashes At Touhy Avenue After Shots Are Fired At Car On Edens Expressway; Lanes Shut Down For Hours

Uber learned in November 2016 that hackers had accessed personal data, including driver’s license information, for roughly 600,000 Uber drivers in the U.S.

The company acknowledged the breach in November 2017, saying it paid $100,000 in ransom for the stolen information to be destroyed.

READ MORE: University Of Chicago Police Officer Who Shot Man In Hyde Park Shootout Also Shot Student In 2018

The states sued Uber, saying the company violated laws requiring it to promptly notify people affected by the breach.

Madigan says “Companies cannot hide when they break the law.”

(Copyright 2018 The Associated Press. All Rights Reserved. This material may not be published, broadcast, rewritten or redistributed.)

MORE NEWS: Man Steals, Crashes Jeep With Two Young Girls Inside In Peterson Park