Former Uber CSO Joe Sullivan was charged in August with two felonies for failing to report a 2016 breach that exposed 607,000 personal records. The charges carry with them the potential of jail time of up to five years and three years. Most CISOs agree that the best way to reduce liability is to do the right thing. The FBI release indicates that there is still an outstanding third party who fed the vulnerability data to two data thieves, who have been caught and charged in this case.”]