MisuseIdentity (basic)Government IDFinancial accountFinancial credentialsMediumContained

CAPITAL ONE SERVICES, LLC

bd_060db34ad1e81c6a · schema v1 · pii pii-v2

Severity

Medium

Discovered

Sep 2, 2025

Filed

Nov 20, 2025

To disclose

—

Affected

1state residents only

Confidence

66%

Full breach record for CAPITAL ONE SERVICES, LLC →87 incidents on file

Capital One notified the Nebraska Attorney General of a cybersecurity incident involving one Nebraska resident. A now-former service provider employee accessed Capital One US Card customer accounts and attempted unauthorized transactions between May 20, 2025, and July 8, 2025. Capital One discovered the incident on September 2, 2025, and sent a notification letter to the affected resident on November 17, 2025, offering 24 months of free credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 105 days

May 20, 2025

Begins

Sep 2, 2025

Discovered

Nov 20, 2025

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: CAPITAL ONE SERVICES, LLC
norm: capital one
Domain: capitalone.com

Name: CAPITAL ONE SERVICES, LLC
norm: capital one
Domain: capitalone.com

Discovered: Sep 2, 2025
Breach occurred: May 20, 2025 – Jul 8, 2025
Undetected for: 105 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 17, 2025
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial accountFinancial credentials
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: Partner
Initial access: insider_action

During the incident: Sent notice of this incident to the one (1) impacted Nebraska resident
Offered them 24 months of free credit monitoring and identity protection with TransUnion's myTrueIdentity credit monitoring service
Changes made: Ensured the now former service provider employee no longer has access to your account or any Capital One systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/98900128-b784-403c-ae13-6f3b83fb5d98.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 20, 2025
Raw hash: 1dc691caaf3f99465b7aa2e9b797a6c040ebe529c16ddd148c0df27ab83ccfb7

Reporting entityCAPITAL ONE SERVICES, LLC

Victim entityCAPITAL ONE SERVICES, LLC

Incidentdiscovered Sep 2, 2025

Stated responseSent notice of this incident to the one (1) impacted Nebraska resident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov