jdavis/twofactorauth — pull request #495 by rcj4747 (2014-05-14 19:27:51+00:00)
Title: CapitalOne360: Add notice about ability to view sensitive personal information

Capital One 360 accounts are secured by a 6-10 digit, self-selected PIN. Accounts can not be fully closed / locked. Access to the account leaks sensitive personal information (SPI) through the process of opening a new sub-account including SSN. This information can not be removed or locked down. These issues have been added to notes for this banking service.