On Oct. 5, 2022, a jury found Uber's former security chief, Joseph Sullivan, guilty of felony violations of obstructing a Federal Trade Commission investigation and "misprision of felony" for failing to disclose a 2016 data breach. The case marks the first criminal conviction of a senior executive for obstructing a regulatory investigation into a company's cybersecurity compliance program and concealing a cyber incident from regulators. The conviction comes at a time when federal and state governments are adopting more aggressive policies focused on corporate enforcement and cybersecurity.