Uber’s Former Security Chief Convicted of 2016 Data Breach Cover-Up

Uber’s former chief security officer was convicted of federal fees for illegally masking up the theft of Uber drivers’ and customers’ individual facts in 2016.

Joe Sullivan, earlier also a cybercrime prosecutor for the US Office of Justice, was billed two yrs ago with obstruction of justice and misprision. He was convicted on both equally counts on Wednesday.

The news comes five many years just after Uber CEO Dara Khosrowshahi issued a statement acknowledging that in late 2016, hackers experienced broken into the application giant’s infrastructure and stolen 57 million customer and driver records. 

At the time, Sullivan and Craig Clark, legal director of security and legislation enforcement, were being consequently fired as a final result.

A 12 months afterwards, in 2017, courtroom files confirmed Sullivan had acquired of the theft in November 2016 but tried to cover up that theft by making an attempt to disguise the ransom payment created to the threat actors to recuperate the facts as a bug bounty award.

“In decades absent by, firms would endeavor to address up their facts breaches in the thought that this would effects the company a lot less,” Jake Moore, world-wide cybersecurity advisor at ESET, tells Infosecurity Magazine.

“Having said that, with info thefts developing in substantial swathes across all industries alongside with the introduction of GDPR, it is now considerably more noble to have up to a breach and provide aid and enable to individuals affected in a well timed method.”

In accordance to the executive, time is of the essence in a information breach in which personal facts has been stolen, so customers ought to be alerted promptly.

“It is now even mildly expected that a business will be attacked and likely have a information leak consequently, it is a lot more exciting to keep track of how a organization owns up to a breach and handles the aftermath of the breach.”

Sullivan’s conviction will come months after Uber was compromised all over again. This time, the tech giant blamed the Lapsus$ group for the breach.

Some parts of this article are sourced from:
www.infosecurity-magazine.com