Uber reportedly paid a 20-year-old man to keep silent about security breach