Hacker obtained personal information of 6 million people in Canada - Action News
Home WebMail Friday, November 22, 2024, 04:46 AM | Calgary | -13.8°C | Regions Advertise Login | Our platform is in maintenance mode. Some URLs may not be available. |
Business

Hacker obtained personal information of 6 million people in Canada

Capital One Financial Corp. said Monday that the personal information of about 100 million individuals in the United States and sixmillion people in Canada were obtained by a hacker who has since been arrested.

Stolen data includes names, addresses, phone numbers and credit scores

Capital One Financial Corp. says the personal information of more than 100 million customers, including six million people in Canada, was obtained by a hacker who has since been arrested. (Jeff Chiu/The Associated Press)

Capital One Financial Corp. saidMonday that the personal information including names, addresses, phone numbers and credit scores of about 100 million individuals in the United States and sixmillion people in Canada were obtained by a hacker.

About onemillion social insurance numbersof the company's Canadian credit card customers were also compromised.

Capital said it became aware of the hack on July 19.

The U.S. Justice Department said Paige Thompson,a former Seattle technology company software engineer, was arrested on Monday on a criminal complaint charging computer fraud and abuse for hacking into Capital One Financial Corp.'s stored data.

About 140,000 social security numbers and 80,000 linked bank account numbers were compromised, Capital One said. The company also said credit card numbers were not affected.

The breach is expected to cost between $100 million US and $150 million in 2019, mainly due to customer notifications, credit monitoring and legal support, Capital One said.

According to the 12-page criminal complaint, the hacker allegedlyposted information from her hack on the coding platformGitHub. The hackerwas able to gain access to the data through a misconfigured web application firewall, the U.S. attorney's office said.

A GitHub user alertedCapital One to the potential data theft, who in turn alerted the Federal Bureau of Investigation, according to the DOJ's statement.

The allegations have not been proven in court.Thompson, 33, made her initial appearance in U.S. District Court in Seattle on Monday and was ordered detained pending a hearing on Aug. 1, according to the statement.

Investigators say Thompson is known by the alias "erratic."

A representative for the U.S. attorney's office said it was not immediately clear what the suspect's motive was.

"Based on our analysis to date, we believe it is unlikely that the information was used for fraud or disseminated by this individual," Capital One said in a statement. "However, we will continue to investigate."

With files from CBC News