Uber said an unauthorized party used compromised credentials at a service provider to access its data, ​according to a notice posted on the California ‌attorney general's website.