Dark web listings say they won't refund/replace if Uber asks for verification: a sign that Uber's experiments with strong verification requirements are paying off.
Password resets are a necessary evil, but they're best avoided however they are done. And you don't get to use the word "hacked" if you use and reuse weak passwords!