In 2016 hackers stole data on about 57 million Uber users and 600,000 driver’s license numbers. Uber’s security chief, Joe Sullivan, had the hackers paid $100,000 in bitcoin to sign nondisclosure agreements. He told his staff that “this investigation does not exist.” New management found out in 2017 and disclosed the breach.
In October 2022 a federal jury in San Francisco convicted Sullivan of obstruction and of concealing a felony. It was believed to be the first criminal prosecution of a company executive over a data breach.