Capital One Data Breach
In July 2019, Capital One Financial Corporation, one of the largest consumer banks and credit card issuers in the United States, disclosed a major cybersecurity breach affecting approximately 106 million individuals across the US and Canada.
Exposed Data Types
10- Full names
- Physical addresses
- Phone numbers
- Email addresses
- Dates of birth
- Income levels
- Credit scores
- Social security numbers
- Bank account numbers
- Financial transactions
About This Breach
A former Amazon AWS systems engineer exploited a server-side request forgery (SSRF) misconfiguration in the bank's open-source web application firewall (WAF) to exfiltrate massive troves of customer data hosted on Amazon S3 cloud buckets. The compromised records spanned credit card applications from 2005 to 2019, including applicant names, addresses, credit scores, self-reported incomes, approximately 140,000 Social Security numbers, and 80,000 linked bank account numbers, leading to an $80 million regulatory penalty from US banking regulators.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
