Capital One Says Breach Hit 100M Individuals in U.S (bloomberg.com)

Article summary

A former Seattle technology company software engineer was arrested for allegedly hacking into Capital One's data stored on a cloud-computing company's server, resulting in the theft of personal and financial data of approximately 100 million individuals in the US. The intrusion occurred through a misconfigured web application firewall that enabled access to the data. The stolen data included credit card applications, Social Security numbers, and bank account numbers. The hack was allegedly carried out by exploiting a vulnerability that allowed the hacker to assume an IAM role with access to an S3 bucket.

Main themes

• Capital One breach
• cloud security
• data theft
• IAM role exploitation
• WAF misconfiguration

What commenters say

• The breach was caused by a misconfigured web application firewall that allowed the hacker to access sensitive data.
• The hacker exploited a vulnerability to assume an IAM role with access to an S3 bucket, rather than the bucket being public or wide open.
• The use of cloud services like AWS requires careful configuration and monitoring to prevent such breaches.
• The breach highlights the importance of proper security measures, such as encryption and access controls, to protect sensitive data.
• Some commenters believe that the breach was a result of incompetence or complacency on the part of Capital One's security team.
• Others argue that the breach was a result of a complex exploit that took advantage of a specific vulnerability, rather than a simple mistake.
• The breach has significant implications for the security of cloud-based data storage and the use of IAM roles and access controls.
• Proper auditing and oversight are necessary to prevent similar breaches in the future.