Capital One Data Breach Impacting millions of users

Insider threat programs are never mature enough in most organizations, or in situations such as this, third-party vendor security measures. Your vendors should be the absolute last people you trust, even with right to audit in your contract. As far as exploiting a vulnerability, yeah, I doubt that. Unless by vulnerability you mean an insecure design of the software that just allowed anyone on the "trusted" network to log in.

Zero trust networking now!

a reply to: opethPA

I can tell you from personal experience that I disagree that a small portion of white collar crimes are convicted.

I didn't word my response on that very well. What I meant to say was that when the feds decide to charge someone for a white collar crime, they usually only focus on one of those crimes instead of the many others they committed before they were charged. Maybe if the feds focused on all of the crimes they commit before charging them, they would get longer sentences. Then again, that would drag out their investigations longer and allow the criminal to commit more crimes before going to prison at all.

I agree with you on the rest of your post.

a reply to: dfnj2015

You mean as a bank, it might not be a great idea to store all of your customers personal information with another company, who employs people that you don't know, that you didn't hire, that you haven't vetted? And then you operate as if nothing could go wrong. Brilliant!

a reply to: opethPA

Yup, they sent everyone emails offering free credit and identity theft monitoring.
How about waving the bill Capital One.

originally posted by: CriticalStinker
a reply to: opethPA

$125, AND up to $250 more (at $25 per hour) if you can prove you spent 10 hours of your time on hack-related stuff, I think. I know it's $25 per hour, up to a 10 hour max for time spent on...something. Not recovery efforts for stolen money/ID theft, they want documentation for that. The $25 p/h one is different, I don't think it requires any proof at all, just your good word?

Correct. If it's more than ten hours you must show proof. For example, if you spent personal time checking your statements, signing up for credit protection/monitoring, etc.

Yikes, and I thought the PSN hack from a few years ago was a bummer.
Glad Im not with these people, though they probably have my info too the way it's swapped around like STDs on spring break