Last year, the Department of Justice sent shockwaves through corporate America by criminally prosecuting former Uber security chief Joseph Sullivan for his handling of a 2016 data breach at the ride-sharing company.