Senate Consumer Protection Subcommittee to Probe Uber Data Breach, 'Bug Bounty' Programs

The Senate Consumer Protection Subcommittee plans a Feb. 6 hearing on the Uber data breach affecting 57 million accounts, the “overall value” of cybersecurity “bug bounty” programs and other approaches to identifying vulnerabilities. Uber disclosed its data breach in 2017 after concealing it for a year (see 1711270047). The hearing will examine “lessons learned” from the breach and “allegations of impermissible payments” by Uber aimed at concealing the incident, the Senate Commerce Committee said Tuesday. Uber Chief Information Security Officer John Flynn, HackerOne CEO Marten Mickos and Luta Security CEO Katie Moussouris are to testify. The hearing will begin at 2:45 p.m. in 253 Russell.