UnknownCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMedium
Capital One, National Association
bd_cb338ffa6a4733b5 · schema v1 · pii pii-v1
Full breach record for Capital One, National Association →Capital One, National Association reported a cybersecurity incident to the Maine Attorney General affecting 1,277 individuals, including 8 Maine residents. The breach occurred between May 15, 2020, and June 2, 2020, and was discovered on August 6, 2020. The company stated that customers are at risk of future fraud but there is no evidence that data was actually breached. Affected data included names and financial account or credit/debit card numbers. Capital One provided 2 years of free credit monitoring through TransUnion.
Maine clockDiscovered Aug 6, 2020 → Filed with AG Sep 25, 202050d ⏱ ME AG >30d7 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_30deae9b23189a4dMaine State AGfiled 2020-09-29(4d gap)Verified
- bd_6973a9613f814a6dMontana State AGfiled 2020-08-19(37d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c52c8993-003a-4cb1-84c2-ef8b25b5cf90.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 25, 2020
- Raw hash
- 4daabd9b35f8b96b6839974ba05f5e3600c9b7277d7b0b0d4beec53ed7203f16
Reporting entity
- Name
- Capital One, National Associationnorm: capital one national
- Industry
- Financial Services
Victim entity
- Name
- Capital One, National Associationnorm: capital one national
- Industry
- Financial Services
Incident
- Discovered
- Aug 6, 2020
- Materiality determined
- —
- Notification sent
- Aug 19, 2020
- Affected individuals
- 1,277
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unknown
- Regulator citations
- Filed data breach notice with Maine Attorney General
Compliance
- Time to disclose
- 7 weeks(50 days from discovery to filing)
- Compliance flags
- ME AG >30d · 50d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 6, 2020→ Filed with AG: Sep 25, 202050d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.