Hackers accessed data from millions of Uber users in 2016, but it wasn’t revealed to the public until 2017.