The October conviction of former Uber security chief Joe Sullivan for concealing a 2016 data breach from government regulators sent ripples of anxiety through the C-suite over the prospect of more executives being held personally liable after a hack.