It doesn't matter if this was a bug bounty or not. It doesn't matter whether blackmail occurred. The difficulty for Uber is that the existence of this a bug w

It doesn't matter if this was a bug bounty or not. It doesn't matter whether blackmail occurred. The difficulty for Uber is that the existence of this a bug was kept a secret from the public, whose information may have been stolen. Nobody knows that this bug was not exploited by other parties.