I’ve heard that many, many, many large companies pay off hackers to not release data from breaches all the time. It’s a common practice by both hackers and the companies, and beneficial to both sides after a successful hack. The company saves face, the hackers are free to go about their efforts against other companies without attention or their methods becoming public. Everyone wins. Even the customers whose data isn’t released publicly!
Uber is a bullshit excuse for a company, but in this way no more bullshit than average.