Former Uber CSO Charged in Hack Cover-upFormer Uber CSO Charged in Hack Cover-up
The charges stem from a 2016 attack in which 57 million records were breached.
August 21, 2020
Joe Sullivan, Uber's former CSO, has been charged with obstruction of justice and misprision of a felony following a 2016 hack of the ride-share company. If convicted, Sullivan faces a maximum of five years in prison for the obstruction charge and a maximum of three years in prison for the misprision charge.
In 2016, Uber suffered a breach of personally identifiable information for 57 million Uber drivers and riders. According to the complaint, Sullivan "took deliberate steps to conceal, deflect, and mislead the Federal Trade Commission about the breach."
Sullivan had given testimony to the FTC regarding a 2014 breach approximately 10 days before learning of the 2016 breach. Rather than report the second breach, Sullivan led an effort that took many steps to avoid disclosure.
The breach was publicly disclosed, and Sullivan fired, after a change in CEO in 2017. The company ultimately paid nearly $150 million in fines for its mishandling of the incident.
A trial date for Sullivan has not yet been sent.
Read more details here.
About the Author(s)
Tricks to Boost Your Threat Hunting GameNov 06, 2023
Hacking Your Digital Identity: How Cybercriminals Can and Will Get Around Your Authentication MethodsOct 26, 2023
Modern Supply Chain Security: Integrated, Interconnected, and Context-DrivenNov 06, 2023
How to Combat the Latest Cloud Security ThreatsNov 06, 2023
Reducing Cyber Risk in Enterprise Email Systems: It's Not Just Spam and PhishingNov 01, 2023
The State of Supply Chain Threats
How to Deploy Zero Trust for Remote Workforce Security
How to Use Threat Intelligence to Mitigate Third-Party Risk
Securing the Remote Worker: How to Mitigate Off-Site Cyberattacks
How Enterprises Are Managing Application Security Risks in a Heightened Threat Environment