Joe Sullivan was accused of failing to report to authorities a 2016 cybersecurity incident that affected the data of 57