Former Uber Chief Security Officer Joe Sullivan (frequently associated with the "guilty" verdict in 2022) was convicted for concealing a massive 2016 data breach from the Federal Trade Commission (FTC). The breach compromised the personal information of 57 million users and 600,000 driver's license numbers. Instead of reporting the hack, Sullivan authorized a $100,000 "hush money" payment in Bitcoin to the hackers through Uber’s "bug bounty" program—a system normally reserved for ethical hackers—and required them to sign non-disclosure agreements falsely stating they hadn't stolen any data. In March 2025, the U.S. Court of Appeals upheld his conviction for obstruction of justice and misprision of a felony. This case set a landmark legal precedent in 2026, establishing that cybersecurity executives can be held personally and criminally liable if they actively work to hide security failures from federal investigators.