Hacker Accesses Personal Information of 100M Capital One Customers

Share

In 2017, a data breach at Equifax, one of the major credit reporting companies, exposed the Social Security numbers and other sensitive information of roughly half of the US population. The information includes names, addresses, zip codes/postal codes, phone numbers, email addresses, dates of birth, and self-reported income.

A lone attacker is accused of stealing personal information that included bank account numbers and Social Security numbers.

According to the bank, the breach may have occurred in March of this year. Last week, it reached a $700 million settlement with US regulators over that breach. After the breach, the company's profits declined with the closing of shares at 5.9%.

None of Erratic's postings suggest Thompson sought to profit from selling the data taken from various Amazon cloud instances she was able to access. There's no evidence as of yet if anyone downloaded the data.

The New York Times reported Thompson was a former employee of Amazon Web Services. On Twitter, a user with an account linked to Thompson and her alias posted pictures of a cat and wrote about coding and struggles with mental health.

Once she'd stolen the data, Thompson, who went by the name "erratic" within the hacker community, nearly seemed to want to be caught.

According to CNN, Thompson used to work as a systems engineer for a cloud hosting company that Capital One was a client of.

She was undone by her propensity to brag about her successful attack on Capital One and by an informant who told the Federal Bureau of Investigation about what she'd done. They found devices in her possession that reference Capital One and Amazon as well as other entities that may have been targets of attempted - or actual - breaches.

In a statement, Capital One said the hack affected 100 million individuals in the United States and six million in Canada.

Читайте также: Cardi B Concert Suddenly Canceled Over "Threat" Against The Rapper

If you're a Capital One customer, what action should you take? Thompson sent a command that returned a list of more than 700 folders and copied data from an unspecified number of them.

However, the bank does not believe the stolen data was used fraudulently.

Ted Rossman, a CreditCards.com analyst, said in a statement to The Washington Post that it's free and easy to do online or over the phone.

Capital One said about 1 million Canadian Social Insurance numbers also were compromised.

The credit card issuer said affected individuals will be notified through a "variety of channels".

Capital One is offering free credit monitoring and identity protection for people who have been affected.

Crumbaugh says 90% of data breaches start with a person clicking a malicious link and the solution to this problem could be as easy as companies providing better training and education.

If Capital One does end up settling with consumers, Bartholomew said, it would probably be for less money because the claims likely wouldn't be as egregious.

При любом использовании материалов сайта и дочерних проектов, гиперссылка на обязательна.
«» 2007 - 2019 Copyright.
Автоматизированное извлечение информации сайта запрещено.

Код для вставки в блог

Share