A hacker gained access to 100 million Capital One credit card applications and accounts

https://www.cnn.com/2019/07/29/business/capital-one-data-breach/index.html

By Rob McLean, CNN Business
Updated 9:26 PM ET, Mon July 29, 2019

In one of the biggest-ever data breaches, a hacker gained access to more than 100 million Capital One customers' accounts and credit card applications earlier this year.

The compromised data includes 140,000 Social Security numbers, 1 million Canadian Social Insurance numbers and 80,000 bank account numbers, in addition to an undisclosed number of people's names, addresses, credit scores, credit limits, balances, and other information, according to the bank and the US Department of Justice.

Paige Thompson, 33, was arrested in connection with the breach, the Justice Department said Monday. The department alleges that Thompson "posted on the information sharing site GitHub about her theft of information from the servers storing Capital One data."

Thompson had previously worked as a tech company software engineer and was able to gain access by exploiting a misconfigured web application firewall, the DOJ said.

•••••