Capital One

Capital One notified Delaware AG (Case DSE 191404) of a data breach occurring March 22-23, 2019, discovered July 19, 2019. An external individual gained unauthorized access to credit card application and customer data from 2005-2019. Approximately 1 million individuals affected, including 140,000 SSNs and 80,000 bank account numbers. Capital One offered 2 years of TransUnion credit monitoring and worked with federal law enforcement.

Affected (this filing): 1,000,000

Capital One notified the California AG of a breach occurring March 22-23, 2019, discovered July 19, 2019. An external individual exploited a vulnerability to access credit card applicant and customer data, including names, SSNs, and bank account numbers. 17,807 California residents were notified. Capital One fixed the vulnerability, worked with law enforcement, and provided two years of credit monitoring via TransUnion.

Affected (this filing): 17,807

Capital One filed a supplemental breach notification with the California AG regarding unauthorized access to its network on March 22-23, 2019. An external individual exploited a vulnerability to access consumer and small business application data (names, addresses, DOBs, income) and some transaction data. Approximately 25,850 California residents had SSNs and bank account numbers exposed. Capital One fixed the vulnerability, notified law enforcement, and provided two years of credit monitoring to affected residents.

Affected (this filing): 25,850