BREAKING: Capital One data breach: Arrest after details of 100m US individuals stolen




July 30, 2019 08H18 GMT/ZULU

   Share


Image copyright

GETTY IMAGES

Image caption

The alleged hacker was arrested on Monday

by Tamara Kachelmeier and Biodun Iginla, BBC News Technology reporters, New York

The personal details of about 106 million individuals across the US and Canada were stolen in a hack targeting financial services firm Capital One, the company has revealed.

The announcement came after the alleged hacker was arrested on Monday.

According to Capital One, the data included names, addresses and phone numbers of people who applied for its credit card products.

But the hacker did not gain access to credit card account numbers, it said.

HOW MANY PEOPLE HAVE BEEN AFFECTED?

Capital One is a major credit card issuer in the US and also operates retail banks.

The firm said in a statement released on Monday that the breach affected approximately 100 million individuals in the US and 6 million people in Canada.

The statement added that about 140,000 social security numbers and 80,000 linked bank account numbers were compromised in the US.

In Canada, about one million social insurance numbers belonging to Capital One credit card customers were also compromised.

The hack was identified on 19 July.

Capital One said the hacker was able to "exploit" a "configuration vulnerability" in the company's infrastructure.

Aside from names and dates of birth, the hacker also managed to obtain credit scores, limits, balances, payment history and contact information.

HOW HAS CAPITAL ONE REACTED?

Capital One said it was unlikely the information was used for fraud but it would continue to investigate the breach.

The company will notify those affected and will provide them with free credit monitoring and identity protection.

Chairman Richard Fairbank said in a statement: "While I am grateful that the perpetrator has been caught, I am deeply sorry for what has happened.

"I sincerely apologise for the understandable worry this incident must be causing those affected and I am committed to making it right. "

WHAT DO WE KNOW ABOUT THE ALLEGED HACKER?

The US Justice Department has confirmed it has arrested a former Seattle technology company software engineer in connection with the breach.

Paige Thompson, 33, was arrested on Monday on charges of computer fraud and abuse. She made an initial appearance in federal court in Seattle.

A hearing has been scheduled for 1 August.

Court documents claim she boasted about the data breach on an online forum.

A statement by the US attorney's office in Washington said: "On July 17 2019, a GitHub user who saw the post alerted Capital One to the possibility it had suffered a data theft."

Ms Thompson faces a maximum sentence of five years in prison and a $250,000 (£204,713) fine.

RELATED TOPICS

SHARE THIS STORY ABOUT SHARING

MORE ON THIS STORY

US & CANADA


Two children among dead in US festival shooting

Full article Two children among dead in US festival shooting

Video

Video

'People were running out, screaming and yelling'

Full article 'People were running out, screaming and yelling'


Senate fails to overturn Saudi arms sale veto

Full article Senate fails to overturn Saudi arms sale veto

More Videos from the BBC

Recommended by Outbrain

Elsewhere on BBC

Recommended by Outbrain

You Might Also Like


From Around the Web

Posted by Biodun Iginla at 10:28 PM  Email This

BlogThis!

Share to Twitter

Share to Facebook

Share to Pinterest

Labels: BBC News TechnologyCapital One data breachcomputer fraudHacker,Paige ThompsonRichard Fairbanksocial security numbersTamara Kachelmeier and Biodun IginlaUS and CanadaUS Justice Department


No comments:


Post a Comment


To view or add a comment, sign in

Insights from the community

Others also viewed

Explore topics