Massive Cyberattack Exposes Millions: Capital One Customers in Jeopardy | June 23, 2024
Channel: Hacking Space Frontier 
Date: 24/06/2023

Capital One has confirmed that it was affected by a cyberattack on NCB Management Services, a company that purchases debt. Initially, the incident was thought to only impact former customers of Bank of America, but Capital One revealed that its customers were also involved. NCB had sent breach notification letters in March, stating that 494,969 individuals had their sensitive financial information exposed. Capital One disclosed that over 16,500 people had their personal information, including addresses, Social Security numbers, account numbers, and account statuses, leaked during the attack on NCB. NCB later informed Capital One that the unauthorized access also involved a set of credit card accounts owned by Capital One. The affected individuals were offered two years of free identity monitoring services and identity theft restoration. The breach notification letters were filed by Capital One with regulators in Maine and Texas. NCB had reportedly disregarded internal concerns about cybersecurity before the attack. The company subsequently sent additional breach notification letters in May to regulators in several states, but no ransomware group has claimed responsibility. The cyberattack affected nearly 1.5 million individuals, exposing financial account numbers, credit card numbers, debit card numbers, security codes, passwords, and PINs. NCB provides services to major banks and car companies, purchasing accounts from prominent lenders. A consumer rights law firm has filed a class action lawsuit against NCB on behalf of victims whose Bank of America credit card account information was accessed.