The Helix extortion group says it took about a million files from Uber Freight, which confirms a data security incident but won't say if it paid a ransom.