Former Uber Technologies chief security officer (CSO) Joe Sullivan has been convicted by a jury of hiding a 2016 data breach from the U.S. Federal Trade Commission.<\/p>\n
Bloomberg News reported<\/a> the San Francisco jury rejected his defence that other executives knew about the coverup and were responsible, convicting him of obstructing a government investigation and concealing the theft of personal data of 50 million customers and 7 million drivers. That included over 800,000 Canadians.<\/p>\n Sullivan was accused of quietly arranging for Uber to pay the hackers US$100,000 in Bitcoin to delete the stolen data, under the guise of a program used to reward security researchers for identifying vulnerabilities, known as a \u201cbug bounty,\u201d\u00a0 the news report said. In return, the two hackers agreed not to disclose that they had stolen the data. The hackers later pleaded guilty for their role in the incident.<\/p>\n The October 2016 hack stayed secret until November, 2017 when it was disclosed by the new chief executive officer (CEO), Dara Khosrowshahi.<\/p>\n The prosecution noted that Sullivan emailed Uber\u2019s then-CEO about that hack 12 hours after it was discovered.<\/p>\n The incident has been hanging over Uber ever since. In 2018 it paid a $148 million in a civil settlement<\/a> to all 50 states and Washington D.C. for the coverup.<\/p>\n Separately, in July Uber entered a non-prosecution agreement<\/a> with federal prosecutors to resolve a criminal investigation that the ride-sharing company deceived consumers about its privacy and data security practices.<\/p>\n Sullivan will be sentenced for Wednesday\u2019s conviction at a future date.<\/p>\n In a commentary, David Lindner, CISO at Contrast Security<\/a>, said the entire situation is extremely unfortunate for Uber and the broader legal\/security communities. \u201cWhat Uber did was cover up a breach through means of hiding it as a bug bounty submission,\u201d he said in a statement. \u201cThe conviction of the security chief is a good start but for what was disclosed there should be even more accountability of the executives and even board members.<\/p>\n \u201cTransparency is the only path forward for organizations. Transparency of breaches, transparency of known vulnerabilities, and transparency of the components used to build their software. Uber failed in being transparent and it has resulted in not only a fine but in the conviction of a human behind the decisions. We will see more of this if we don\u2019t move to transparency fast.\u201d<\/p>\n The post Ex-Uber CSO convicted of cover-up in 2016 data breach<\/a> first appeared on IT World Canada<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":" Former Uber Technologies chief security officer (CSO) Joe Sullivan has been convicted by a jury of hiding a 2016 data breach from the U.S. Federal Trade Commission. Bloomberg News reported the San Francisco jury rejected his defence that other executives knew about the coverup and were responsible, convicting him of obstructing a government investigation and<\/p>\n","protected":false},"author":17,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[355,16],"tags":[425,391,396,393,275,95],"class_list":["post-29384","post","type-post","status-publish","format-standard","hentry","category-legal","category-security","tag-data-breach","tag-di","tag-postmedia","tag-security-strategies","tag-top-story","tag-uber"],"acf":[],"_links":{"self":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/29384","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/comments?post=29384"}],"version-history":[{"count":2,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/29384\/revisions"}],"predecessor-version":[{"id":29427,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/29384\/revisions\/29427"}],"wp:attachment":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/media?parent=29384"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/categories?post=29384"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/tags?post=29384"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}