Capital One Breach: Engineer Arrested for Server Hack

Posted: July 30, 2019 to News.

Tags: Data Breach, Cloud Security, Digital Forensics

Paige Thompson, a software engineer who formerly worked for Amazon Web Services, is accused of breaking into a Capital One server. Thompson obtained access to 140,000 Social Security numbers, 1 million Canadian Social Insurance numbers and 80,000 bank account numbers. She also had access to over 100 million people's names, addresses, credit scores and limits, balances, credit applications, and other information as far back as 2005. The US Department of Justice complaint alleges that Thompson attempted to share the illegally obtained information online. She gained access via a misconfigured web application firewall. The hack occurred March 22 and 23^rd. Thompson was then seen on multiple social media sites claiming she had the information. One person who saw the information on GitHub notified Capital One, who then notified the FBI. Thompson’s Seattle residence was searched on Monday which led to her arrest. The complaint includes Thompson’s admission of guilt, indicating that she “recognizes that she has acted illegally.” The company indicated it fixed the vulnerability and said it is "unlikely that the information was used for fraud or disseminated by this individual." But the investigation is ongoing. “I sincerely apologize for the understandable worry this incident must be causing those affected and I am committed to making it right," said Capital One CEO Richard Fairbank in a statement. Capital One will notify people affected by the breach and incur hack-related costs of over $150 million.

Related Resources

Learn more about how Petronella Technology Group can help:

Need help implementing these strategies? Our cybersecurity experts can assess your environment and build a tailored plan.

Get Free Assessment

Explore Our Services

Cybersecurity AI Services Compliance HIPAA CMMC Managed IT

About the Author

Craig Petronella

CEO, Founder & AI Architect, Petronella Technology Group

Craig Petronella founded Petronella Technology Group in 2002 and has spent more than 30 years working at the intersection of cybersecurity, AI, compliance, and digital forensics. He holds the CMMC Registered Practitioner credential (RP-1372) issued by the Cyber AB, is an NC Licensed Digital Forensics Examiner (License #604180-DFE), and completed MIT Professional Education programs in AI, Blockchain, and Cybersecurity. Craig also holds CompTIA Security+, CCNA, and Hyperledger certifications.

He is an Amazon #1 Best-Selling Author of 15+ books on cybersecurity and compliance, host of the Encrypted Ambition podcast (95+ episodes on Apple Podcasts, Spotify, and Amazon), and a cybersecurity keynote speaker with 200+ engagements at conferences, law firms, and corporate boardrooms. Craig serves as Contributing Editor for Cybersecurity at NC Triangle Attorney at Law Magazine and is a guest lecturer at NCCU School of Law. He has served as a digital forensics expert witness in federal and state court cases involving cybercrime, cryptocurrency fraud, SIM-swap attacks, and data breaches.

Under his leadership, Petronella Technology Group has served 2,500+ clients, maintained a zero-breach record among compliant clients, earned a BBB A+ rating every year since 2003, and been featured as a cybersecurity authority on CBS, ABC, NBC, FOX, and WRAL. The company leverages SOC 2 Type II certified platforms and specializes in AI implementation, managed cybersecurity, CMMC/HIPAA/SOC 2 compliance, and digital forensics for businesses across the United States.

CMMC-RP NC Licensed DFE MIT Certified CompTIA Security+ Expert Witness 15+ Books

Related Service

Need Cybersecurity or Compliance Help?

Schedule a free consultation with our cybersecurity experts to discuss your security needs.

Schedule Free Consultation

Free cybersecurity consultation available Schedule Now

Capital One Breach: Engineer Arrested for Server Hack

Related Resources

Related Articles

About the Author