Ferguson said that the ride-sharing company violated state law by not informing consumers that their information had been stolen in the 2015 breach.
"Uber users who notice anything suspicious can contact Uber's Help Centre by tapping "Help" in the app, then "Account and Payment Options" "I have an unknown charge" "I think my account has been hacked".
A spokesman for Uber told the BBC the firm is not able to clarify how many United Kingdom drivers are included in the 2.7 million.
The lawsuit alleges that Uber experienced a smaller data breach in 2014 and, although the company vowed to update its security practices in order to meet industry standards, it failed to do so, leading to the 2016 breach, NBC Chicago noted.
Under Washington law, the breach of names, phone numbers and addresses does not require notification, Ferguson said, but the driver's license numbers do. If the breach impacts at least 500 residents, the business must also notify the attorney general's office within 45 days. With investigations under way by the attorneys general of Connecticut, Illinois, Massachusetts, Missouri, New Mexico, and NY, there will likely be more on this front soon.
The suit is the first enforcement action under the 2015 amendments to Washington's data breach law, and the damages theory will likely amount to several millions of dollars. "Consumers expect and deserve protection from disclosure of their personal information".
Uber last week revealed a massive data breach that occurred over a year ago but never came to light because the company conspired to keep it hidden.
The firm has said it has a total of five million active users and 50,000 drivers in the UK.
The Data Privacy Act penalizes the concealment of security breaches involving sensitive information with imprisonment ranging from 18 months to five years and a fine of not less than PHP500,000.
Ferguson announced the state's lawsuit hours after developments in a California court case revealed that federal prosecutors are investigating allegations that Uber deployed an espionage team to plunder trade secrets from its rivals.