Saying 'no evidence' is not the same as saying it hasn't happened, combine that with 'sensitive user data' that is only defined in the statement as being 'like trip history', and there are more questions than answers here. The problem is that the more cynical of readers may cite the very specific language used as not providing real clarity. The update also says that internal software tools that were initially taken offline are also back in operation. This confirms that the investigation and response efforts continue and states that Uber has "no evidence that the incident involved access to sensitive user data (like trip history)" while confirming all Uber services are operational.
Uber confirms incident and says no evidence of sensitive user data exposure Uber/Twitter