In June 2019, it became known about the compromise of the American bank Capital One and the leak of data from 106 million users. Then the data of users leaked to the bank for a credit card in the period from 2005 to 2019 leaked to the side. Including names, addresses, zip codes, phone numbers, email addresses, dates of birth and user income data.
The leak also affected the information on credit cards of the bank’s customers, that is, data on credit ratings and limits, balances, payment history, as well as contact information and fragments of transactions for 23 days in 2016, 2017 and 2018. In addition, it was reported that the cracker gained access to a million Canadian social security numbers, more than 140,000 US social security numbers and 80,000 bank account numbers.
Let me remind you that in connection with the hacking of Capital One, law enforcement authorities detained a 33-year-old resident of Seattle Page A. Thompson aka Erratic, a former employee of Amazon Web Services Inc. According to an official statement by the Justice Ministry, Thompson mentioned the compromise of Capital One in the comments on GitHub, and used the wrong firewall configuration to penetrate the network. On July 17, 2019, a vigilant user drew attention to the words of Thompson, notifying the bank representatives about what was happening, which ultimately led to her arrest.
Now ZDNet reports that, according to court documents, only one was not limited to compromising Capital One. So, during a search in the Thompson house, law enforcement officers seized servers on which not only the information stolen from Capital One was found, but also several terabytes of data stolen from more than 30 other companies, educational institutions and other organizations.
While law enforcement officials have not disclosed the names of the affected companies, but judging by previous media reports, they may include Unicredit, Vodafone, Ford, the University of Michigan and the Ohio Department of Transportation.
According to the prosecutor’s office, the data detected significantly differ in both type and quantity, but, apparently, these dumps did not contain personal and identification information.
While the investigation is still ongoing, law enforcement officials insist that Thompson should be kept in custody, as she had already been charged with persecution three times, and she also threatened to shoot in the company’s office and commit suicide through a police officer (threatening a police officer with a fake gun and forcing open fire to kill). Investigators write that Thompson’s behavior is obviously due to mental health problems.
To protect your data from cybercrimes and keep your anonymity safe – use RusVPN on your devices now!