A hacker gained access to 100 million Capital One credit card applications and accounts

In one of the biggest-ever data breaches, a hacker gained access to more than 100 million Capital One customers' accounts and credit card ap...

Posted: Jul 30, 2019 3:23 AM
Updated: Jul 30, 2019 4:15 AM

In one of the biggest-ever data breaches, a hacker gained access to more than 100 million Capital One customers' accounts and credit card applications earlier this year.

Paige Thompson is accused of breaking into a Capital One server and gaining access to 140,000 Social Security numbers, 1 million Canadian Social Insurance numbers and 80,000 bank account numbers, in addition to an undisclosed number of people's names, addresses, credit scores, credit limits, balances, and other information, according to the bank and the US Department of Justice.

A criminal complaint says Thompson tried to share the information with others online. The 33-year-old, who lives in Seattle, had previously worked as a tech company software engineer for the cloud hosting company that Capital One was using, the DOJ said. She was able to gain access by exploiting a misconfigured web application firewall, according to a court filing.

Thompson was arrested Monday in connection with the breach, the Justice Department said. Thompson's attorney could not be immediately reached for comment.

Capital One said the hack occurred March 22 and 23. The company indicated it fixed the vulnerability and said it is 'unlikely that the information was used for fraud or disseminated by this individual.' However, the company is still investigating.

'I sincerely apologize for the understandable worry this incident must be causing those affected and I am committed to making it right,' said Capital One CEO Richard Fairbank in a statement.

The breach affected around 100 million people in the United States and about 6 million people in Canada, according to Capital One.

However, 'no credit card account numbers or log-in credentials were compromised and over 99% of Social Security numbers were not compromised,' the company said.

The criminal complaint against Thompson paints a picture of a less-than-careful suspect. Thompson posted the information on GitHub, using her own name, the complaint says, adding that she also indicated on social media that she had Capital One information.

The FBI special agent who investigated Thompson believes Thompson tweeted that she wanted to distribute Social Security numbers along with full names and dates of birth.

The complaint indicates Thompson 'recognizes that she has acted illegally.'

Capital One said it will notify people affected by the breach and will make free credit monitoring and identity protection available. The company expects to incur between $100 million and $150 million in costs related to the hack, including customer notifications, credit monitoring, tech costs and legal support due to the hack.

Capital One's stock was down 4% after hours late Monday night.

Terre Haute
Few Clouds
53° wxIcon
Hi: 64° Lo: 47°
Feels Like: 53°
Robinson
Overcast
53° wxIcon
Hi: 61° Lo: 45°
Feels Like: 53°
Indianapolis
Broken Clouds
51° wxIcon
Hi: 63° Lo: 48°
Feels Like: 51°
Rockville
Overcast
48° wxIcon
Hi: 63° Lo: 47°
Feels Like: 48°
Casey
Overcast
56° wxIcon
Hi: 61° Lo: 48°
Feels Like: 56°
Brazil
Few Clouds
53° wxIcon
Hi: 63° Lo: 47°
Feels Like: 53°
Marshall
Few Clouds
53° wxIcon
Hi: 63° Lo: 47°
Feels Like: 53°
Breezy, warmer Wednesday
WTHI Planner
WTHI Temps
WTHI Radar

WTHI Events

 

Illinois Coronavirus Cases

(Widget updates once daily at 7 p.m. CT)

Confirmed Cases: 292082

Reported Deaths: 8858
CountyConfirmedDeaths
Cook1443155217
DuPage17589561
Lake16953487
Will14045378
Kane13159326
St. Clair6665190
Winnebago6037149
Madison5760137
Champaign473320
McHenry4609118
Peoria351050
McLean329523
Rock Island302676
Kankakee275277
Unassigned2532244
Sangamon243245
Kendall202025
Tazewell178025
LaSalle172557
DeKalb159038
Macon156044
Coles147231
Williamson140645
Jackson126224
Clinton119020
Adams114910
Boone112823
Randolph94111
Effingham8722
Vermilion7914
Whiteside75320
Ogle7286
Monroe68016
Knox6723
Grundy6705
Henry6665
Morgan66223
Bureau65211
Jefferson62038
Marion5661
Christian55411
Macoupin5507
Franklin5413
Stephenson5296
Union51524
McDonough48215
Logan4681
Crawford4584
Woodford4266
Fayette4183
Livingston4036
Cass39811
Jersey39415
Shelby3944
Lee3831
Montgomery37613
Iroquois36719
Perry35315
Saline3464
Warren3332
Bond3305
Douglas3147
Wayne2805
Jo Daviess2662
Lawrence2592
Carroll2355
Greene22911
Cumberland2185
Hancock2183
Moultrie2183
Washington2161
Jasper2139
Richland2136
Pulaski1811
Fulton1780
Clark1742
White1690
Wabash1583
Clay1560
Johnson1560
Mason1531
Mercer1405
Piatt1390
Pike1341
De Witt1252
Menard1251
Edgar1138
Massac1132
Ford1055
Marshall1050
Alexander831
Scott790
Gallatin732
Hamilton712
Henderson690
Edwards640
Brown620
Calhoun600
Putnam570
Stark552
Schuyler500
Hardin400
Pope291
Out of IL20

Indiana Coronavirus Cases

(Widget updates once daily at 8 p.m. ET)

Confirmed Cases: 118322

Reported Deaths: 3591
CountyConfirmedDeaths
Marion21502767
Lake10688323
Elkhart6707111
St. Joseph6619113
Allen6330205
Hamilton4938109
Vanderburgh378131
Hendricks2766124
Monroe265536
Tippecanoe256613
Johnson2352124
Clark225957
Porter219947
Delaware200162
Cass19559
Vigo186827
Madison170375
LaPorte149141
Floyd139664
Warrick138242
Howard132663
Kosciusko125917
Bartholomew118457
Marshall101524
Dubois99919
Boone99146
Grant95134
Hancock94643
Noble93132
Henry81226
Jackson7739
Wayne77014
Morgan73438
Daviess68028
Shelby68029
Dearborn67528
LaGrange64011
Clinton62314
Harrison59224
Putnam58411
Gibson5355
Knox5289
Lawrence51629
Montgomery51121
DeKalb48811
White48714
Decatur45939
Miami4394
Greene42735
Fayette42313
Jasper4012
Scott39011
Steuben3907
Posey3460
Sullivan33812
Jennings31612
Franklin31325
Clay3085
Ripley3078
Orange28824
Whitley2826
Carroll27813
Adams2763
Wabash2728
Starke2717
Washington2701
Wells2674
Spencer2633
Jefferson2503
Huntington2473
Fulton2442
Tipton22822
Randolph2238
Perry22113
Jay1920
Newton17411
Owen1711
Martin1680
Pike1641
Rush1574
Vermillion1310
Fountain1292
Blackford1213
Pulaski1141
Crawford1100
Parke1072
Brown1043
Benton870
Ohio797
Union790
Switzerland690
Warren411
Unassigned0226