Hackers stole the personal data of 57 million customers and drivers from Uber, in a massive breach that the company concealed for more than a year, according to Bloomberg.

Data from the October 2016 attack included names, email addresses and phone numbers of 57 million Uber riders around the world.

The personal information of about 600,000 drivers including names and driver’s license numbers were accessed.

No Social Security numbers, credit card information, trip location or other data were taken, Uber said.

Bloomberg also reports that Uber said it had a legal obligation to report the hack to regulators and to drivers whose license numbers were taken. But the company paid hackers $100,000 to delete the data and keep the breach quiet.

Uber released a statement on the 2016 attack, and also published resources for riders and drivers.