Is Uber’s rider database a sitting duck for hackers?