Uber to pay $148 million in data breach settlement