2016–2026
2016 data breach: Kalanick informed and approves $100,000 payment, but Joe Sullivan alone convicted over cover-up
Protagonist not prosecuted — these proceedings are not counted in their formal charges or convictions.
Following the theft of data concerning approximately 57 million users and drivers, the security team handled the incident through its bug bounty programme and paid the hackers $100,000 in exchange for a confidentiality agreement. Court documents indicate that Kalanick knew about the incident and approved the payment. Uber did not inform the FTC or public before the leadership change.
- Role of the person profiled
- Protagonist not prosecuted
Sources · 3
- [1]U.S. Department of JusticeUber Enters Non-Prosecution Agreement Related to 2016 Data BreachGovernment sourceVery high reliability
- [2]U.S. Department of JusticeFormer Chief Security Officer Of Uber Convicted Of Federal Charges For Covering Up Data BreachGovernment sourceVery high reliability
- [3]Supreme Court of the United StatesPetition for Writ of Certiorari — Sullivan v. United StatesCourt recordVery high reliability
Last verified: 20 September 2026
