HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
Capital One, National Association
bd_31bfe2681b9ffea2 · schema v1 · pii pii-v1
Full breach record for Capital One, National Association →Capital One reported a data security incident discovered on July 19, 2019, involving unauthorized access to an external system. The breach occurred on March 22-23, 2019. Capital One determined that the personal information of 198,419 customers, including Social Security numbers, was accessed. A follow-up notice was submitted to the Maine Attorney General on February 26, 2021, updating the count of affected Maine residents to 1,233. Affected individuals were offered 24 months of credit monitoring.
Maine clockDiscovered Jul 19, 2019 → Filed with AG Apr 1, 2021622d ✗ ME AG >90d21 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed198,419 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0a504a37-edb2-46f4-b82e-d81ae2ee0f71.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 1, 2021
- Raw hash
- 00e177b5c46139e33b81af83f479de50251b6ccc1198c3440ec9c1fd4a859bdb
Reporting entity
- Name
- Capital One, National Associationnorm: capital one national
Victim entity
- Name
- Capital One, National Associationnorm: capital one national
Incident
- Discovered
- Jul 19, 2019
- Materiality determined
- —
- Notification sent
- Feb 26, 2021
- Affected individuals
- 198,419
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Submitted data breach notice to Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 21 months(622 days from discovery to filing)
- Compliance flags
- ME AG >90d · 622dME resident >180d · 588d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 19, 2019→ Filed with AG: Apr 1, 2021622d 90 days ME AG >90d Maine Discovered: Jul 19, 2019→ Notified: Feb 26, 2021588d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.