November 19, 2024

Former Amazon Software Engineer Convicted in Capital One Security Breach

News

Former Amazon Software Engineer Convicted in Capital One Security Breach

By: Andrew Zhang

Last Friday, 36 year-old Paige Thompson was convicted of hacking Capital

One for her personal gain. This decision was because Thompson, a

Washington state resident, gained access to the personal information of millions

of Capital One customers.

A Seattle jury found Thompson guilty of violating the Computer Fraud and

Abuse Act, but innocent of identity theft and access device fraud. She was found

guilty of five counts of gaining unauthorized access to a protected computer and

damaging a protected computer, as well as guilty of wire fraud charges.

These charges didn’t come from thin air. In 2019, she downloaded the

personal info of over 100 million. Capital One users used the breach

to mine cryptocurrency.

Her lawyers tried to defend her, but to no avail. They argued that she was

using the same methods and technologies as good hackers, also known as white

hat hackers, and that she was going to report the vulnerabilities to Capital One.

But this was obviously a lie. “Ms. Thompson used her hacking skills to

steal the personal information of more than 100 million people, and hijacked

computer servers to mine cryptocurrency. Far from being an ethical hacker trying

to help companies with their computer security, she exploited mistakes to steal

valuable data and sought to enrich herself.” said Nicholas W. Brown, the U.S.

attorney for the Western District of Washington.

The blame wasn’t all on Ms. Thompson, though. Capital One agreed to pay

$80 million to regulators because it didn’t have the security measures in place

needed to protect its customers’ private information in 2020. It also agreed to pay

$190 million to the victims of the breach.

From the beginning, it was clear that nobody thought she was innocent.

“She wanted data, she wanted money, and she wanted to brag,” said Andrew

Friedman, an assistant U.S. attorney.

The case isn’t off the hook yet. Her sentencing date is set to be September

15 of this year.

Link to Article: https://www.nytimes.com/2022/06/17/technology/paige-thompson-capital-one-hack.html

Back To Top