The two people behind a 2016 data breach at Uber Technologies Inc were found to be in Canada and Florida, an Uber cyber security executive told the U.S. Congress on Tuesday.

The NDP is calling for a formal investigation into a hack of Uber that compromised the data of 57 million users last year.

Privacy advocates have called on the government for years to implement what is known as "mandatory breach reporting," which would require companies to alert consumers when their information is breached.