He said he also learned that the email had not disclosed that Mr. Sullivan and his team had paid the hackers $100,000, an unusually large sum for the big bounty program, Mr. Khosrowshahi said.
“Based on the facts that I had learned, we had an obligation to disclose” the incident to regulators, he said on the stand. “These security issues are serious, and if there is the potential of an obligation for disclose, you have to. People are affected by this.”
Uber discovered that it had been breached again on Thursday when a hacker announced their presence in the company’s workplace messaging system, Slack. The hacker claimed to have access to numerous internal systems used by the company to manage its data, code and communications. Uber shut down Slack and other corporate systems on Thursday evening as it investigated the extent of the breach, and notified law enforcement.
On Friday, Uber said it had found no evidence that the hacker had gained access to “sensitive user data” like trip history. All of its services, including its flagship app and Uber Eats, its food delivery service, were functioning, the company said.
Kate Conger contributed reporting.
Article source: https://www.nytimes.com/2022/09/16/business/dara-khosrowshahi-ceo-uber-breach-trial.html