Bloomberg reports that Uber’s board hired an external law firm “to question security staff and investigate activities” overseen by Joe Sullivan, Uber’s Chief Security Officer. Bloomberg says the investigation specifically included COIN, the Competitive Intelligence program whereby Uber collected information about drivers and activity at Grab (via a system Uber called Surfcam) as well as Lyft (via Hellother Sullivan efforts including surveilling competitors and certain employees, as well as vetting potential hires.