A criminal complaint alleges the former CSO of a ride-sharing platform obstructed justice and deliberately concealed breach details; he allegedly paid hackers (who downloaded 57 million users’ and drivers’ PII) $100,000 through a bug bounty program, kept critical details about the breach from management (breach details, that payment was made before the hackers were identified), and did not inform the FTC about the breach during its investigation of the platform’s data security, breaches and PII protections. #data #cybersecurity #CCPA #privacy #emergingrisk #PII