Uber hired Sullivan as its CSO in April 2015. At the time, Uber disclosed to the FTC that it had been the victim of a data breach in 2014. Subsequently, in May 2015, the FTC launched an investigation into Uber, requesting information on the 2014 data breach and Uber's general data security practices.