U.S. federal prosecutors have charged Joseph Sullivan, Uber’s chief security officer from 2015 to 2017, with covering up a massive 2016 data breach by arranging a US$100,000 payoff to the hackers responsible under the company’s “bug bounty” program. The breach saw the personal data of 57 million Uber passengers stolen. Sullivan, now Cloudflare’s chief information security officer, could not be reached for comment. (The New York Times)
Talking point: This is believed to be the first charge in relation to the 2016 hack. The breach wasn’t reported until 2017, after then-CEO Travis Kalanick was forced out and replaced by current head Dara Khosrowshahi, who disclosed the breach that November, issued a public apology and fired Sullivan.“We continue to cooperate fully with the Department of Justice’s investigation,” Uber spokesman Matt Kallman told The Times. If Sullivan is convicted he faces up to eight years in prison.