MFI-Miami Blog

  Capital One Data Breach Compromised The Personal Information of 106 Million Customers In 2019  Capital One Financial has been fined $80 million by the FDIC for  a 2019 data breach . The breach comprised the personal information of  106 million credit cardholders and applicant s. The  Federal Reserve Board  also demanded the company enhance its risk-management program and related governance and controls around cybersecurity and information security. The hack took place when the bank transferred information-technology operations to the public cloud. It was one of the largest-ever data breaches of a big bank. The Office of the Comptroller of the Currency said the bank failed to establish effective risk assessment processes. The OCC also alleged Capital One failed to correct the deficiencies in a timely manner. Read More At MFI-Miami

Transgender Hacker Arrested For Stealing Data From 100 Million Capital One Customers In Mass Hack A Seattle-based transgender hacker named Paige Thompson has been arrested for hacking Capital One bank’s systems to steal data it stored on Amazon’s Web Services cloud. Thompson is a former Amazon systems engineer. Thompson had planned to steal the addresses, phone numbers and names of 100 million people in the United States.  The transgender woman accessed the social security numbers on 140,000 people. She was able to get credit card numbers on 80,000 additional people. Thompson allegedly pulled it off between March and July of this year. She broke into the bank’s servers through a misconfiguration in its firewall.  Amazon’s Web Services cloud was storing the data. However, Amazon insists it is not to blame for the hack. Amazon claims she exploited Capital One’s systems to access it.  Capital One admitted that it was a fault in its infrastructure.  ...