While I do agree that a mid/low-level employee is very unlikely to be the cause (why risk a reasonably high salary at Uber and possibly being blackballed from the industry if detected?), I think Hanlon's Razor [1] could be used here to infer that it was more likely a breach of Uber's systems.