Car-hailing service Uber announced on Friday that a data breach left the personal information of about 50,000 drivers vulnerable, The Wall Street Journal reports. While the company said it discovered the hack in September, it waited nearly five months to report the breach, an amount of time one data-breach expert called "an unusual delay." Most states leave the exact amount of notification time vague, but the maximum among those that do offer specifics is 60 days.