At issue is not just Sullivan’s slowness to report the breach. Uber already paid $148 million to settle in 2018 with attorneys general across the United States for violating state data breach disclosure laws, which often require notification within 45 days.

Read full article on Wired – Threat Level