Uber waits a year to report 57 million users had information stolen