Uber didn’t immediately respond to a request for comment.

The employee’s credentials were then likely purchased from the dark web.

Uber says no personal data was compromised.