HackingFinancial ServicesFinanceStolen CredentialsData ExfiltratedCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountFinancial credentialsCriticalResolved

Capital One, National Association

bd_4c35819263ceffe6 · schema v1 · pii pii-v1

Severity

Critical

Discovered

Jul 19, 2019

Filed

Aug 8, 2019

To disclose

20 days

Affected · nationwide

140,000585 in this filing

Linked

3 filings

Confidence

66%

Full breach record for Capital One, National Association →24 incidents on file

Capital One notified Montana residents of a data breach occurring March 22-23, 2019, discovered July 19, 2019. An individual gained unauthorized access to credit card application and customer data, including names, SSNs (140,000), and bank account numbers (80,000). Capital One fixed the issue, worked with federal law enforcement, and offered two years of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 119 days

discovery → filing · 20 days

Mar 22, 2019

Begins

Jul 19, 2019

Discovered

Aug 8, 2019

Filed

vs. sector median

6 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_39b1648b531bc4572019-08-08Candidate
Oregon State AGbd_39811f9940add23a2019-09-16 · +39dVerified

Name: Capital One, National Association
norm: capital one national

Name: Capital One, National Association
norm: capital one national
Industry: Financial Servicesllm

Discovered: Jul 19, 2019
Breach occurred: Mar 22, 2019 – Mar 23, 2019
Undetected for: 119 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 7, 2019
Affected individuals: 140,000state + nationwide
Data types: Identity (basic)Government IDFinancial accountFinancial credentials
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: working with federal law enforcement
Initial access: valid_credentials

During the incident: Offering you two years of credit monitoring and identity protection with TransUnion's credit monitoring service at no cost to you
Immediately fixed the issue
Promptly began working with federal law enforcement
Changes made: Invested heavily in cybersecurity
Use what we’ve learned from this incident to further strengthen our cyber defenses
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 days(20 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 2 states

View merged incident ↗

Montana State AGAug 8 · first

Montana State AGAug 8 · first · this page

Oregon State AG+39d

Pattern: first filing Aug 8 (MT), last Sep 16 (OR) — a 39-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Breach-NotificationDetails-77.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 8, 2019
Raw hash: af83c0263d6eba3f04e444551fd9f2495c926b8600bc890bd9111e58b8642676

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityCapital One, National Association

Victim entityCapital One, National Association

Incidentdiscovered Jul 19, 2019

Stated responseOffering you two years of credit monitoring and identity protection with TransUnion's credit monitoring service at no cost to you

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov