Skip to main content

Capital One says it was hit with data breach, affecting tens of millions of credit card applications

FILE PHOTO: The logo and ticker for Capital One are displayed on a screen on the floor of the New York Stock Exchange (NYSE) in New York, U.S., May 21, 2018. REUTERS/Brendan McDermid

  • Capital One says it was hit with a data breach, affecting an estimated 100 million US individuals and approximately 6 million in Canada.
  • Paige A. Thompson, a former software engineer, was arrested Monday by FBI in Seattle.
  • She appeared in court and was charged with a single count of computer fraud and abuse, which carries a sentence of up to five years in prison and a $250,000 fine.
  • Visit Business Insider's homepage for more stories.

Capital One says it was hit with a data breach, affecting an estimated 100 million US individuals and approximately 6 million in Canada, according to a press release published Monday.

Here's what was compromised:

  • According the Capital One statement, the largest category of information that was accessed pertained to consumers and small businesses, who applied for credit cards between 2005 and early 2019, which includes personal information from credit card applications, such as names, addresses, zip codes/postal codes, phone numbers, email addresses, dates of birth, and self-reported income.
  • Data involving transactions and customer status was also accessed, including credit scores, credit limits, balances, payment history, and contact information.
  • Approximately 140,000 credit card customers' Social Security numbers
  • Approximately 80,000 of credit card customers' linked bank account numbers 
  • Approximately 1 million social insurance numbers of Canadian credit card customers

"Importantly, no credit card account numbers or log-in credentials were compromised and over 99 percent of Social Security numbers were not compromised," according to Capital One. "We will notify affected individuals through a variety of channels. We will make free credit monitoring and identity protection available to everyone affected."

Paige A. Thompson, a former software engineer, was arrested Monday by FBI in Seattle, according to a press release from the Justice Department. She appeared in court and was charged with a single count of computer fraud and abuse, which carries a sentence of up to five years in prison and a $250,000 fine.

"While I am grateful that the perpetrator has been caught, I am deeply sorry for what has happened," Capital One Chairman and CEO Richard D. Fairbank said in a statement. "I sincerely apologize for the understandable worry this incident must be causing those affected and I am committed to making it right."

Thompson was arrested on a criminal complaint, according to a statement by Justice Department, after she posted about her theft information on the sharing site GitHub. Another user flagged the posts to Capital One on July 17 on the possibility of data theft. Capital One contacted the FBI two days later once it confirmed there had been an intrusion into its data.

Capital One said in the statement that "this type of vulnerability is not specific to the cloud," as the elements involved are "common to both cloud and on-premises data center environments."

While it's not clear which cloud provider CapitalOne is referring to in its press release, it's extremely likely that it's the market-leading Amazon Web Services — the two companies announced a partnership back in 2016 that would see CapitalOne become one of Amazon's highest-profile cloud customers in the financial services industry.

This story is developing and will be updated accordingly as more details emerge.

Join the conversation about this story »

NOW WATCH: Here's why phone companies like Verizon and AT&T charge more for extra data




Get Articles and ICO whitepapers written by Williams Alfred Onen

Comments

Popular posts from this blog

Monster List of Markets: 135 Places to Find Freelance Writing Jobs

Are you looking for freelance writing jobs? Here’s a hint. Content mills, bid sites, and job boards might seem like an easy place to go to find freelance writing jobs, but they’re usually a waste of time. Too much competition, flaky clients, low rates. That’s usually what you’ll find there. And it doesn’t have to be that way. You’re better off looking for freelance writing jobs by pitching magazines and websites that pay writers. It’s called pro-active marketing. And it’s a game changer if you’re serious about full-time freelancing. Instead of sitting around waiting for the Mysterious Force to drop some assignments in your lap, pitch a story idea to a magazine or website. Study the market. Come up with a story idea. Do a little research and mini-interview. Then write a great pitch letter and send it off. Rinse and repeat. Need a little help figuring out where to pitch your bright ideas? We’ve done some of the hard work for you. Check out this updated monster list of 135 markets (f

A peek inside Sequoia Capital’s low-flying, wide-reaching scout program

Ten years ago, Sequoia Capital began quietly encouraging founders of its portfolio companies to consider which of their founder friends they might like to get behind financially. Sequoia would let them write checks to those companies, and it would share with them any later rewards. It was a brilliant idea. It allowed Sequoia to keep tabs on entrepreneurs — and nascent technologies — not yet in its universe. It cemented the firm’s ties to the founders who were already in its family. Not last, it grew Sequoia’s already considerable influence in Silicon Valley. Fast forward, and the ripple effects of the highly successful program have not only been wide-reaching, but they’ve quietly reshaped the industry in ways that only those closest to Sequoia have been able to fully appreciate — until now. To learn more on the tenth anniversary of Sequoia’s “scouts” initiative — which has since been widely copied by other venture firms — we reached out to Sequoia’s Mike Vernal, the partner who to

As it readies a test for vaping additives, cannabis testing company Cannalysis raises $22 million

Cannalysis , a testing company for cannabis, has raised $22 million in a new round of financing as it prepares to bring a new test for vaping additives to the market. The test, which the company is preparing to unveil later this week, will test for the presence and amount of Vitamin E acetate, a chemical compound that may be linked to the aping related illness that has swept through the U.S. in the past month. Cannalysis chief executive Brian Lannon said the new product was developed in response to the current crisis in the cannabis industry over illnesses related to vaping cannabis products. “The big story that’s been going out over the last week isn’t the product that’s going out in cannabis, but an additive called Vitamin E acetate. We have  developed a test for that,” Lannon says. “ As part of the different compliance testing that’s required, it’s not mandated to test for any of these additives… What I’m anticipating based on the phone calls we’ve been getting is that a lot of o