Uber's former security chief, Joe Sullivan, is being charged by federal authorities for his role in concealing a 2016 hack, according to The New York Times.

The company paid out $100,000 to a hacker in Florida through its bug bounty program instead of disclosing the hack to federal authorities who were already investigating the company for other data breaches. In a statement, Uber said it will "continue to cooperate fully" with the investigation. Sullivan currently works for Cloudflare, according to the Times. Cloudflare's CEO Matthew Prince tweeted that he's "sad" to see the allegations. "Anytime an opportunity arose, Joe's advocated for us to be as transparent as possible," Prince said.