Uber reveals year-old data breach—of 57 million customers and drivers—plus the fact that it paid off the hackers.