Capital One Data Breach Exposes Over 100 Million Customers
STEVE INSKEEP, HOST:
Federal authorities charged a Seattle area tech worker with hacking Capital One, accessing millions of people's personal information. NPR's Martin Kaste reports.
MARTIN KASTE, BYLINE: Assistant U.S. attorney Steven Masada says this data breach was discovered because the hacker couldn't keep quiet.
STEVEN MASADA: Sometimes bravado is what gets them caught.
KASTE: Masada says Paige A. Thompson, a woman he describes as a tech worker with special skills, found a way to trick Capital One computers into sharing confidential customer information. He says she stored some of the stolen data on a software developer site called GitHub and talked about her achievement online.
MASADA: Her statements, you know, bragging to others, potentially like-minded people, is what got her - drew attention to her from others, which ultimately got her reported to the Federal Bureau of Investigation.
KASTE: The bank says the breach affected more than 100 million customers, releasing dates of birth, addresses and income, information from people's credit card applications. The bank says more sensitive information was encrypted, and relatively few Social Security numbers got out - only about 140,000. Though, Canadian customers appeared to be more exposed. The bank says about 1 million of them had their social insurance numbers compromised.
So far, though, assistant U.S. attorney Masada says there's no evidence that any of this has been used for other crimes.
MASADA: We don't have any information that Ms. Thompson used or monetized the data in any way.
KASTE: But Masada says the case has taken an unexpected turn. When agents served a search warrant on the alleged hacker's home yesterday, they say they stumbled across a separate crime involving the alleged hacker's landlord and roommate, a man named Park Quan.
MASADA: Mr. Quan actually had a small arsenal of firearms in his bedroom, approximately 20 weapons ranging from handguns to assault-type rifles.
KASTE: Masada says as a convicted felon, Quan is not allowed to own weapons. And investigators say he even had bumps stocks, which have been illegal under federal regulations since earlier this year. Martin Kaste, NPR News, Seattle.
INSKEEP: And we should note, Capital One is an NPR financial contributor.
(SOUNDBITE OF MUSIC) Transcript provided by NPR, Copyright NPR.