Uber ex-security chief accused of hacking coverup must face fraud charges, judge rules

An Uber office is shown in Redondo Beach, California, U.S., March 16, 2022. REUTERS/Mike Blake

(Reuters) - A federal judge on Tuesday said a former Uber Technologies Inc security chief must face wire fraud charges over his alleged role in trying to cover up a 2016 hacking that exposed personal information of 57 million passengers and drivers.

The U.S. Department of Justice had in December added the three charges against Joseph Sullivan to an earlier indictment, saying he arranged to pay money to two hackers in exchange for their silence, while trying to conceal the hacking from passengers, drivers and the U.S. Federal Trade Commission.

U.S. District Judge William Orrick in San Francisco rejected Sullivan's claim that prosecutors did not adequately allege he concealed the hacking to ensure that Uber drivers would not flee and would continue paying service fees.

Orrick also rejected Sullivan's claim that the people allegedly deceived were Uber's then-chief executive, Travis Kalanick, and its general counsel, not drivers.

"Those purported misrepresentations, though not made directly to Uber drivers, were part of a larger scheme to defraud them" according to the indictment, Orrick wrote.

Lawyers for Sullivan did not immediately respond to requests for comment. Sullivan also faces two obstruction charges.

The defendant was originally indicted in September 2020, and is believed to be the first corporate information security officer criminally charged with concealing a hacking.

Prosecutors said Sullivan arranged to pay the hackers $100,000 in bitcoin, and have them sign nondisclosure agreements that falsely stated they had not stolen data.

Uber had a bounty program designed to reward security researchers who report flaws, not to cover up data thefts.

Dara Khosrowshahi, Uber's current chief executive, fired Sullivan after learning the extent of the breach.

In September 2018, the San Francisco-based company paid $148 million to settle claims by all 50 U.S. states and Washington, D.C. that it was too slow to reveal the hacking.

(Reporting by Jonathan Stempel in New York; Editing by Matthew Lewis)

Article type: free
User access status:
Subscribe now to our Premium Plan for an ad-free and unlimited reading experience!


Next In Tech News

How to get your smartphone ready for a holiday
Snapchat introduces Family Centre tool to boost child safety
Try a free online tool to perfect your touch typing technique
Apps turning restaurant leftovers into cheap meals take off in Asia
‘Amazing Bomberman’:�The series’ rhythmic Apple Arcade debut
Exclusive-Inspired Entertainment in bid to buy slot machine maker PlayAGS - sources
U.S. heightens export controls on advanced chip, gas turbine engine technologies
Dutch detain suspected developer of crypto mixer Tornado Cash
Annuar: Ministry to take immediate action over iPay88 issue
EV startup Fisker explores higher production in 2023, U.S. manufacturing

Others Also Read