Capital One Data Breach Exposes Over 100 Million Customers An alleged hacker has been charged in connection with the breach. Authorities in Seattle say she is alleged to have hacked credit scores, balances, income information and social security numbers.
NPR logo

Capital One Data Breach Exposes Over 100 Million Customers

  • Download
  • <iframe src="https://www.npr.org/player/embed/746509206/746512823" width="100%" height="290" frameborder="0" scrolling="no" title="NPR embedded audio player">
  • Transcript
Capital One Data Breach Exposes Over 100 Million Customers

Capital One Data Breach Exposes Over 100 Million Customers

Capital One Data Breach Exposes Over 100 Million Customers

  • Download
  • <iframe src="https://www.npr.org/player/embed/746509206/746512823" width="100%" height="290" frameborder="0" scrolling="no" title="NPR embedded audio player">
  • Transcript

An alleged hacker has been charged in connection with the breach. Authorities in Seattle say she is alleged to have hacked credit scores, balances, income information and social security numbers.

STEVE INSKEEP, HOST:

Federal authorities charged a Seattle area tech worker with hacking Capital One, accessing millions of people's personal information. NPR's Martin Kaste reports.

MARTIN KASTE, BYLINE: Assistant U.S. attorney Steven Masada says this data breach was discovered because the hacker couldn't keep quiet.

STEVEN MASADA: Sometimes bravado is what gets them caught.

KASTE: Masada says Paige A. Thompson, a woman he describes as a tech worker with special skills, found a way to trick Capital One computers into sharing confidential customer information. He says she stored some of the stolen data on a software developer site called GitHub and talked about her achievement online.

MASADA: Her statements, you know, bragging to others, potentially like-minded people, is what got her - drew attention to her from others, which ultimately got her reported to the Federal Bureau of Investigation.

KASTE: The bank says the breach affected more than 100 million customers, releasing dates of birth, addresses and income, information from people's credit card applications. The bank says more sensitive information was encrypted, and relatively few Social Security numbers got out - only about 140,000. Though, Canadian customers appeared to be more exposed. The bank says about 1 million of them had their social insurance numbers compromised.

So far, though, assistant U.S. attorney Masada says there's no evidence that any of this has been used for other crimes.

MASADA: We don't have any information that Ms. Thompson used or monetized the data in any way.

KASTE: But Masada says the case has taken an unexpected turn. When agents served a search warrant on the alleged hacker's home yesterday, they say they stumbled across a separate crime involving the alleged hacker's landlord and roommate, a man named Park Quan.

MASADA: Mr. Quan actually had a small arsenal of firearms in his bedroom, approximately 20 weapons ranging from handguns to assault-type rifles.

KASTE: Masada says as a convicted felon, Quan is not allowed to own weapons. And investigators say he even had bumps stocks, which have been illegal under federal regulations since earlier this year. Martin Kaste, NPR News, Seattle.

INSKEEP: And we should note, Capital One is an NPR financial contributor.

(SOUNDBITE OF MUSIC)

Copyright © 2019 NPR. All rights reserved. Visit our website terms of use and permissions pages at www.npr.org for further information.

NPR transcripts are created on a rush deadline by Verb8tm, Inc., an NPR contractor, and produced using a proprietary transcription process developed with NPR. This text may not be in its final form and may be updated or revised in the future. Accuracy and availability may vary. The authoritative record of NPR’s programming is the audio record.