The Department of Justice confirmed on Wednesday that a San Francisco jury found Joe Sullivan guilty of criminal obstruction for failing to report a 2016 cybersecurity incident to the authorities.

Sullivan, Uber Technologies Inc.’s former chief security officer, was found guilty on two counts of obstruction of justice and deliberate concealment of felony.

“Sullivan affirmatively worked to hide the data breach from the Federal Trade Commission (FTC) and took steps to prevent the hackers from being caught,” said Stephanie Hinds, U.S. Attorney for the Northern District of California.

In July, Uber accepted responsibility for covering up the breach and agreed to cooperate with the prosecution of Sullivan over his alleged role in concealing the hacking as part of a settlement with U.S. prosecutors to avoid criminal charges. 

Sullivan was first charged in September 2020, when prosecutors said he arranged to pay hackers $100,000 in bitcoin and had them sign nondisclosure agreements that falsely said they had not stolen data.

Sullivan was also accused of withholding information from Uber officials who could have reported the breach to the Federal Trade Commission, which had been evaluating the San Francisco-based company’s data security after a breach in 2014.