Khosrowshahi fired Sullivan and Craig Clark, a security lawyer, in 2017. Sullivan, who prior to Uber had been the chief security officer at Facebook, is now chief information security officer for the internet infrastructure company Cloudflare. In a tweet on Thursday, Cloudflare CEO Matthew Prince wrote, "Sad to see Joe Sullivan allegations. ... Anytime an opportunity arose, Joe's advocated for us to be as transparent as possible. I hope this is resolved quickly for Joe & his family."
According to media reports following Uber's 2017 breach notification, other company executives and employees aside from Sullivan approved and helped to carry out the plan to treat the breach like a bug bounty disclosure and pay the hackers off through this mechanism. "I was surprised and disappointed when those who wanted to portray Uber in a negative light quickly suggested this was a cover-up," Sullivan told The New York Times in a 2018 statement.
John Flynn, Uber's longtime chief information security officer, who left the company in July, told the Senate Commerce Committee in February 2018 that Uber "made a misstep in not reporting to consumers, and we made a misstep in not reporting to law enforcement."
Shawn Tuma, a partner in the law firm Spencer Fane who specializes in cybersecurity and data privacy issues, notes that Sullivan is apparently being singled out because he provided testimony and assistance to the FTC in its investigation of the company's 2014 breach. Under the Justice Department's standards for establishing individual accountability in ..
Support the originator by clicking the read the rest link below.
