Ask HN: Uber passenger PII leak – what to do?

Without giving too much away, I'm able to see details of a specific Uber passenger's routes, payments, Paypal details, etc. I have not signed up for this, and I have no intention of using this info for nefarious purposes. This appears to be outside the HackerOne scope for Uber as it doesn't relate directly to their websites, APIs or apps. What should I do to avoid the customer support front line and speak to the right people?