MisusePrivilege AbuseCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowResolved
Capital One, National Association
bd_c41e0f77520fd4fe · schema v1 · pii pii-v1
Full breach record for Capital One, National Association →Capital One reported a data breach caused by insider wrongdoing that affected 219 individuals, including one resident of Maine. The breach occurred between September 2, 2020, and February 25, 2021, and was discovered on March 1, 2021. The compromised information includes names and financial account numbers or credit/debit card numbers along with their security codes or PINs. Capital One offered 24 months of free credit monitoring services to the affected individuals.
Maine clockDiscovered Mar 1, 2021 → Filed with AG Apr 22, 202152d ⏱ ME AG >30d7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_dddbccaabdc45527Montana State AGfiled 2021-05-06(14d gap)Verified
- bd_f1f330242ecc85faMaine State AGfiled 2021-05-06(14d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/64a7ef4e-ef4b-47b7-9dc4-638ad03e4040.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 22, 2021
- Raw hash
- 66348782a1223479c8f1dea800b114fdd2404fe28ff9f7714fd5695ba3afe080
Reporting entity
- Name
- Capital One, National Associationnorm: capital one national
Victim entity
- Name
- Capital One, National Associationnorm: capital one national
Incident
- Discovered
- Mar 1, 2021
- Materiality determined
- —
- Notification sent
- Apr 20, 2021
- Affected individuals
- 1
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Insider
- Threat actor
- Internal
Compliance
- Time to disclose
- 7 weeks(52 days from discovery to filing)
- Compliance flags
- ME AG >30d · 52d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 1, 2021→ Filed with AG: Apr 22, 202152d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.