On 27 October, an article from White & Case said that 2 legal cases in the US in the past month suggest that regulators and prosecutors are becoming more determined to take personal action against directors and senior executives who fail to deal adequately with cyber security breaches. Uber’s former chief security officer has been found guilty of criminal obstruction charges for failing to report a cyber breach to the authorities in what is believed to be the first time a US company executive has been criminally prosecuted over a cyber breach. Earlier, the Federal Trade Commission (FTC) announced that it had taken action against the CEO of an online drinks delivery business over the company’s security failures which led to a cyber breach that exposed the personal information of 2.5 million customers.