It did. If you're interested, the congress hearing is here. That hearing is still the primary source for this story. It's worth some time - some journalists ha

It did. If you're interested, the congress hearing is here. That hearing is still the primary source for this story. It's worth some time - some journalists have tried to cover this but mostly just cherrypicked quotes. The entire hearing is better than any of the coverage. https://www.commerce.senate.gov/2018/2/data-security-and-bug-bounty-programs-lessons-learned-from-the-uber-breach-and-security-researchers https://www.commerce.senate.gov/2018/2/data-security-and-bug... You can watch the hearing on that page (it's more interesting to watch than to read) or find links to the various witnesses and their testimony. For example, if you want to read John Flynn's testimony, it is available here (.pdf): John Flynn - CISO @ Uber - https://www.commerce.senate.gov/services/files/7D70E53E-73E9-4336-A100-67B233084F12 https://www.commerce.senate.gov/services/files/7D70E53E-73E9... At this point, the only real lesson for CISO's seems to be 'report'.