Uber's Former Security Chief Was Put on Trial for the Breach

Season 4 · Episode 35 · March 12, 2024

This episode delves into the significance of a major data breach and the trial of Joe Sullivan, Uber's former chief security officer, discussing how Security Leaders can be liable. This conversation discusses the Uber breach and the ongoing trial of Joseph Sullivan, the former chief security...

This episode delves into the significance of a major data breach and the trial of Joe Sullivan, Uber's former chief security officer,  discussing how Security Leaders can be liable.

This conversation discusses the Uber breach and the ongoing trial of Joseph Sullivan, the former chief security officer of Uber The conversation explores how the hacker gained access and the potential ways the breach could have been prevented. The trial of Joseph Sullivan is also discussed, with differing opinions on his actions and the verdict. The conversation highlights the impact of the breach and trial on the cybersecurity community.

 

Takeaways

  • ·      The breach raises questions about the effectiveness of security measures and the need for regular penetration testing.
  • ·      The ongoing trial of Joseph Sullivan, the former chief security officer of Uber, highlights the potential personal liability of cybersecurity leaders.
  • ·      The breach and trial have had a significant impact on the cybersecurity community, leading to a reevaluation of roles and responsibilities.

Chapters PART 2

  • 1:01 Trial of Joseph Sullivan
  • 2:01 Uber's Awareness of the Breach
  • 3:00 Hacker's Access and Screenshots
  • 4:19 How the Hacker Gained Access
  • 7:15 Understanding Hackers
  • 13:40 Multifactor Authentication Fatigue
  • 15:34 Moving Laterally and Pivoting
  • 17:26 Access to Uber's Systems
  • 18:23 Access to Cloud Services
  • 23:20 Bug Bounty Program
  • 25:14 Hacker's Boastful Behavior
  • 26:12 Prevention and Penetration Testing
  • 29:02 Ongoing Trial of Joseph Sullivan
  • 30:28 Previous Breach and Payment to Hackers
  • 33:23 Charges Against Joseph Sullivan
  • 35:18 Testimony of Uber CEO
  • 36:46 Testimony of Former In-House Counsel
  • 39:41 Turning the Breach into a Bug Bounty
  • 43:08 Defense's Argument
  • 45:04 Verdict and Sentencing
  • 46:00 Impact on the Cybersecurity Community

Questions? Text our Studio direct. We read these and when helpful we give a special shout out for those to contact us.

True crime enters our homes and businesses daily. Learn from actual people who fight it daily and show you how in a thriller story. The Moving Target Trilogy. Book 3 to be released September 22nd, 2026. Start with any of them. Be a Moving Target.

Special Author pricing (30% off)

The Moving Target Trilogy. Book 3 to be released September 22nd, 2026. Start with any of them. Be a Moving Target.

Special Author pricing (30% off)

Growth without Interruption. Get peace of mind. Stay Competitive-Get NetGain. Contact NetGain today at 844-777-6278 or reach out at DMauro@NetGainIT.com or find more at www.NETGAINIT.com  
 

Support the show

Want to Watch?

Subscribe and stop reading about it after it happens: https://www.youtube.com/@CyberCrimeJunkies?sub_confirmation=1

Hosted by David Dean Mauro. Former trial lawyer, AI Security Advisor, FBI InfraGard member, VP of Strategic Growth at NetGain Technologies, and author of the Moving Target Trilogy (#1 Amazon Hot New Release, 2026).

MOVING TARGET TRILOGY. Nonfiction cybercrime thrillers. 🔥 4 years. 400+ interviews.
Book 1, Art of Online Camouflage: https://shop.ingramspark.com/b/084?params=d0YQ1pYtxeBRmSQLHLb9uT4aOliPrEuDSfOjQgpXQP9

Book 2, Obedient Machine: https://shop.ingramspark.com/b/084?params=S3F9zWWMC2y2eYiTmUGP91Owy9AUVG4zbLa6NwuX3cl

Book 3, The Ghost and The Machine. Presale open now, releases September 22, 2026: https://a.co/d/027LCoh6

Special edition hardcover, $17.76 for subscribers (30% off).

Want To Read True Crime Stories?
Chaos Brief newsletter: https://www.linkedin.com/newsletters/the-chaos-brief-694145911...