Sen. Moran to Chair Hearing to Examine Data Security and Bug Bounty Programs in Wake of Uber Data Breach

- February 5, 2018

Contact: Tom Brandt 202-224-6521

Sen. Moran to Chair Hearing to Examine Data Security and Bug Bounty Programs in Wake of Uber Data Breach

WASHINGTON -- U.S. Senator Jerry Moran (R-Kan.) - chairman of the Senate Commerce Subcommittee on Consumer Protection, Product Safety, Insurance and Data Security - tomorrow will convene a hearing entitled, "Data Security and Bug Bounty Programs: Lessons Learned from the Uber Breach and Security Researchers." The hearing will examine the October 2016 Uber data breach, the overall value of so-called "bug bounty" programs and other approaches to identify vulnerabilities, and the allegations of impermissible payments by Uber to conceal the security incident.

"As the American public becomes more and more dependent on innovative technologies to complete everyday tasks, cybersecurity vulnerabilities continue to pose an even greater threat to consumers," said Sen. Moran. "My goals for this hearing are to discuss how the variety of vulnerability disclosure programs employed by private industry and government agencies, including bug bounties, can be used effectively to prevent cyber threats from harming consumers and find out what prevented Uber from immediately notifying its users who were impacted by the 2016 breach, the specifics of the related payments and what steps Uber is taking internally to improve its notification protocols."

Hearing Witnesses:

* Mr. John Flynn, Chief Information Security Officer, Uber Technologies, Inc.

* Mr. Marten Mickos, Chief Executive Officer, HackerOne, Inc.

* Ms. Katie Moussouris, Chief Executive Officer, Luta Security, Inc.

* Mr. Justin Brookman, Director for Consumer Privacy and Technology Policy, Consumers Union

Hearing Details:

* Date: Tuesday, February 6, 2018

* Time: 3 p.m. ET

* Location: Russell Senate Office Building, Room 253

* Note: Witness testimony, opening statements, and a live video of the hearing will be available on commerce.senate.gov https://www.commerce.senate.gov/.