A hacker gained access to 100 million Capital One credit card applications and accounts

In one of the biggest-ever data breaches, a hacker gained access to more than 100 million Capital One customers' accounts and credit card ap...

Posted: Jul 30, 2019 3:23 AM
Updated: Jul 30, 2019 4:15 AM

In one of the biggest-ever data breaches, a hacker gained access to more than 100 million Capital One customers' accounts and credit card applications earlier this year.

Paige Thompson is accused of breaking into a Capital One server and gaining access to 140,000 Social Security numbers, 1 million Canadian Social Insurance numbers and 80,000 bank account numbers, in addition to an undisclosed number of people's names, addresses, credit scores, credit limits, balances, and other information, according to the bank and the US Department of Justice.

A criminal complaint says Thompson tried to share the information with others online. The 33-year-old, who lives in Seattle, had previously worked as a tech company software engineer for the cloud hosting company that Capital One was using, the DOJ said. She was able to gain access by exploiting a misconfigured web application firewall, according to a court filing.

Thompson was arrested Monday in connection with the breach, the Justice Department said. Thompson's attorney could not be immediately reached for comment.

Capital One said the hack occurred March 22 and 23. The company indicated it fixed the vulnerability and said it is 'unlikely that the information was used for fraud or disseminated by this individual.' However, the company is still investigating.

'I sincerely apologize for the understandable worry this incident must be causing those affected and I am committed to making it right,' said Capital One CEO Richard Fairbank in a statement.

The breach affected around 100 million people in the United States and about 6 million people in Canada, according to Capital One.

However, 'no credit card account numbers or log-in credentials were compromised and over 99% of Social Security numbers were not compromised,' the company said.

The criminal complaint against Thompson paints a picture of a less-than-careful suspect. Thompson posted the information on GitHub, using her own name, the complaint says, adding that she also indicated on social media that she had Capital One information.

The FBI special agent who investigated Thompson believes Thompson tweeted that she wanted to distribute Social Security numbers along with full names and dates of birth.

The complaint indicates Thompson 'recognizes that she has acted illegally.'

Capital One said it will notify people affected by the breach and will make free credit monitoring and identity protection available. The company expects to incur between $100 million and $150 million in costs related to the hack, including customer notifications, credit monitoring, tech costs and legal support due to the hack.

Capital One's stock was down 4% after hours late Monday night.

Terre Haute
Mostly Cloudy
67° wxIcon
Hi: 71° Lo: 62°
Feels Like: 67°
Robinson
Cloudy
66° wxIcon
Hi: 70° Lo: 62°
Feels Like: 66°
Indianapolis
Cloudy
64° wxIcon
Hi: 72° Lo: 58°
Feels Like: 64°
Rockville
Cloudy
63° wxIcon
Hi: 72° Lo: 59°
Feels Like: 63°
Casey
Cloudy
64° wxIcon
Hi: 69° Lo: 63°
Feels Like: 64°
Brazil
Cloudy
67° wxIcon
Hi: 72° Lo: 60°
Feels Like: 67°
Marshall
Cloudy
67° wxIcon
Hi: 70° Lo: 61°
Feels Like: 67°
Scattered Showers and Thundershowers
WTHI Planner
WTHI Temps
WTHI Radar

WTHI Events

 

Illinois Coronavirus Cases

(Widget updates once daily at 7 p.m. CT)

Cases: 1367126

Reported Deaths: 24801
CountyCasesDeaths
Cook54734510147
DuPage908351288
Will75828993
Lake67459991
Kane58579778
Winnebago33393477
Madison30589520
McHenry28705288
St. Clair27915514
Peoria23202317
Champaign20710145
Sangamon18831234
McLean18236181
Tazewell16999291
Rock Island15041318
Kankakee14232210
Kendall1310594
LaSalle12589244
Macon10784200
DeKalb9912119
Vermilion9702132
Adams8476123
Williamson7446130
Whiteside7166172
Boone672074
Ogle612081
Grundy590176
Clinton576590
Coles569196
Knox5573150
Jackson503364
Henry501167
Livingston483385
Stephenson477183
Woodford476277
Effingham472972
Macoupin471583
Marion4472115
Franklin446375
Monroe435793
Jefferson4304120
Lee417453
Randolph413484
Fulton395557
Morgan390282
Logan389159
Montgomery373474
Bureau372782
Christian368673
Perry317960
Fayette317855
Iroquois302966
McDonough286747
Jersey269350
Douglas259035
Saline256654
Lawrence240625
Shelby229937
Union226240
Crawford212326
Bond205524
Cass199525
Jo Daviess181924
Clark180633
Warren180246
Pike179352
Ford179147
Wayne178053
Hancock176231
Carroll175636
Richland175240
Edgar170840
White169826
Washington164425
Moultrie161128
De Witt151725
Mason151645
Piatt150014
Clay148143
Mercer147533
Johnson144615
Greene144033
Massac134640
Wabash134612
Cumberland129019
Menard123712
Jasper115118
Marshall107418
Hamilton83615
Schuyler7607
Brown7106
Pulaski6867
Stark63824
Edwards56912
Henderson52414
Calhoun5182
Putnam4833
Scott4791
Alexander46811
Gallatin4604
Hardin38612
Pope3224
Out of IL20
Unassigned02356

Indiana Coronavirus Cases

(Widget updates once daily at 8 p.m. ET)

Cases: 735999

Reported Deaths: 13486
CountyCasesDeaths
Marion1007151752
Lake54249977
Allen40946680
St. Joseph36335553
Hamilton35829408
Elkhart28844443
Tippecanoe22475219
Vanderburgh22367397
Porter18946311
Johnson18067381
Hendricks17317315
Clark13036192
Madison12762339
Vigo12501249
LaPorte12086215
Monroe11957172
Delaware10755187
Howard10001218
Kosciusko9466117
Hancock8373142
Bartholomew8098156
Warrick7799155
Floyd7690178
Grant7098174
Wayne7072199
Boone6745101
Morgan6611140
Dubois6166117
Marshall6111112
Cass5876105
Dearborn583178
Henry5785105
Noble565984
Jackson503773
Shelby494396
Lawrence4602120
Gibson437192
Harrison436672
DeKalb430585
Clinton428453
Montgomery425889
Whitley398739
Huntington394480
Steuben391057
Miami383968
Knox372890
Jasper372649
Putnam363760
Wabash355380
Adams342755
Ripley340770
Jefferson331881
White317754
Daviess298399
Wells292081
Decatur285992
Fayette282162
Greene280585
Posey272034
LaGrange268970
Scott267554
Clay261347
Washington242132
Randolph242081
Spencer232931
Jennings230949
Starke219354
Fountain213946
Sullivan212242
Owen203356
Jay197830
Fulton196040
Carroll190420
Orange184754
Perry184637
Rush174025
Vermillion170044
Franklin168535
Tipton163445
Parke146716
Pike135634
Blackford135132
Pulaski117445
Newton108934
Brown102641
Crawford101415
Benton99014
Martin89515
Warren82615
Switzerland7948
Union71410
Ohio57111
Unassigned0417