Capital One is an American banking holding company specializing in credit cards and car loans. Your data was compromised in 2019. In the 2005-2019 period, there was a large-scale information leak about users who applied to the bank for a credit card. Including names, addresses, zip codes, phone numbers, email addresses, dates of birth and income data. Police later detained Seattle resident Paige Thompson, known online under the pseudonym Erratic. She previously worked at Amazon Web Services Inc. she.

Details of the case and decision

Among other things, the leak affected information about bank customers’ credit cards: credit ratings and limits, balance, payment history, as well as contact details and transaction fragments for 23 days in 2016, 2017 and 2018. The perpetrator also obtained one million Canadian social security numbers, more than 140,000 American social security numbers, and 80,000 bank account numbers.

Thompson himself brought in law enforcement. He mentioned the discrediting of Capital One in the comments on GitHub and used the wrong firewall configuration to get into the network. Thompson’s words were soon noticed by an attentive user and later turned to the bank’s representatives.

Investigators reported that Thompson created a tool that scans the internet for misconfigured Amazon Web Services servers. The vulnerability allowed anyone to access data stored on servers.

Effects

• The decision is scheduled for September 15, 2022.
• at a range of fees Paige Thompson faces up to 25 years in prison.
• Attempts to highlight that he is an ethical hacker and information security researcher have apparently been unsuccessful.