Breach reporting has changed over the past year following the conviction of former Uber CSO Joe Sullivan for actively taking steps to hide a 2016 data breach.