Ride-hailing service Uber has been hit with a proposed class-action lawsuit over a recently disclosed data breach involving the personal information of about 50,000 drivers, Reuters reports.

The suit says the company did not do enough to prevent the 2014 breach and then waited too long (about five months) to disclose it. The suit says Uber violated a California law requiring companies to safeguard employees’ personal information.

Uber has been at the center of several legal challenges recently, including lawsuits from passengers assaulted by drivers, claims from drivers who say they were illegally classified as independent contractors, and a suit filed by prosecutors in California accusing Uber of misleading passengers by charging a “safe rides fee” to fund industry-leading background checks, while the company did little to screen applicants.

According to Reuters, Uber is fighting most of the claims, saying it has a rigorous background check process and that drivers are not employees of the company because they choose when to work.