Originally published at: https://tidbits.com/2019/07/31/capital-one-data-breach-reveals-information-on-106-million/
Capital One has announced a security breach that affects approximately 100 million people in the United States and 6 million in Canada.
Another bank bites the dust (or eats it). Investing in gold rather than virtual assets is looking more & more attractive!
Good thing I never applied for a credit card with them. They appear to have some good deals. But as usual, when things sound too good to be true, they usually are.
Rich Mogull said that he knows Capital One’s security team and that they generally do a very good job. The more details that emerge about the person who hacked into Capital One’s system, the more it sounds like a unique situation, not the usual negligence of a company doing something stupid like storing confidential data in plaintext on an unprotected server.
And apart from that really weird “No bank account numbers or Social Security numbers were compromised, other than” wording in the announcement, it does seem as though Capital One is responding quickly and appropriately.
it does seem as though Capital One is responding quickly and appropriately.
That was my feeling. I saw their notice several days ago and it seemed like they handled it well and the breach is only serious for a few people (people who applied for credit in a certain time frame). Most of the info stolen was named and addresses and such, which are all leaked a million other ways already.
My sources tell me this may be only the tip of the iceberg. The hacker had many GB of data involving quite a few other companies, so the could potentially be millions of people.
Ugh, that’s bad. Any sense that she distributed the information? Some of the reporting was suggesting that she thought she was being a white-hat hacker and thus may not have been selling to the highest bidder.
Nothing yet and I follow Troy Hunt of ';–have i been pwned? closely.
I’ve read the same reports about the hacker. I think most of us wonder why she was arrested instead of the corporate entities responsible for keeping our data safe.
1 Like