The ride-sharing service has revealed it never reported a 2016 breach that affected 57 million Uber riders and drivers.