HackingFinancial ServicesFinanceStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedTargetedIdentity (basic)Government IDFinancial accountFinancial credentialsEmploymentCriticalResolved

CAPITAL ONE SERVICES, LLC

bd_13ee5f82ccdc84c7 · schema v1 · pii pii-v1

Severity

Critical

Discovered

Jul 19, 2019

Filed

Aug 15, 2024

To disclose

—

Affected

140,000

Confidence

66%

Full breach record for CAPITAL ONE SERVICES, LLC →87 incidents on file

Capital One disclosed a data breach where an individual gained unauthorized access to credit card customer and applicant data between March 22-23, 2019. Capital One determined the breach on July 19, 2019. Approximately 140,000 Social Security numbers and 80,000 bank account numbers were accessed. Capital One fixed the issue, worked with law enforcement, and offered two years of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 119 days

discovery → filing · 62 months / 1854 days

Mar 22, 2019

Begins

Jul 19, 2019

Discovered

Aug 15, 2024

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed140,000 affectedView incident

Name: CAPITAL ONE SERVICES, LLC
norm: capital one
Domain: capitalone.com

Name: CAPITAL ONE SERVICES, LLC
norm: capital one
Domain: capitalone.com
Industry: Financial Servicesllm

Discovered: Jul 19, 2019
Breach occurred: Mar 22, 2019 – Mar 23, 2019
Undetected for: 119 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 7, 2019
Affected individuals: 140,000nationwide
Data types: Identity (basic)Government IDFinancial accountFinancial credentialsEmployment
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated CollectionT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: working with federal law enforcement
Initial access: valid_credentials

During the incident: Offering you two years of credit monitoring and identity protection with TransUnion's credit monitoring service at no cost to you
Immediately fixed the issue
Promptly began working with federal law enforcement
Changes made: Invested heavily in cybersecurity
Use what we've learned from this incident to further strengthen our cyber defenses
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2019/08/Capital_One_DSE_191404_notice_samples.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 15, 2024
Raw hash: f7a13ffdbdd1aca314657034e88f9eefc06d0b5a20d3c5e864356fb96c5c9c75

Reporting entityCAPITAL ONE SERVICES, LLC

Victim entityCAPITAL ONE SERVICES, LLC

Incidentdiscovered Jul 19, 2019

Stated responseOffering you two years of credit monitoring and identity protection with TransUnion's credit monitoring service at no cost to you

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceattorneygeneral.delaware.gov