Uber waited a year to report that 57 million users had information stolen