Joseph Sullivan was convicted over covering up a security breach of 57 million user accounts in 2016.