An Uber driver in Portland, Ore., has filed what may turn out to be a class-action lawsuit against the internet car service, claiming, in the wake of a breach, that it had not imposed the appropriate security measures to safeguard the personal information of its drivers.

Sasha Antman filed the suit in federal court in San Francisco, Uber's home base, and charged that Uber not only violated California law by failing to protect personal information of its employees but it also dragged its heels on disclosing the breach, waiting five months to make public the 2014 hack that exposed the personal details of about 50,000 current and former drivers

The company said at the time it had brought in security professionals to investigate the “one-time access” by an unauthorized third party.

Antman is seeking $5 million in damages.