Credit card issuer Capital One Financial Corp said on Monday that personal information, including names and addresses of about 100 million individuals in the United States and 6 million people in Canada were obtained by a hacker who has been arrested.
The suspect, a 33-year-old former Seattle technology company software engineer identified as Paige Thompson, made her initial appearance in US District Court in Seattle on Monday, the US Attorney’s office said.
The incident is expected to cost between $100 million and $150 million in 2019, mainly due to customer notifications, credit monitoring and legal support, Capital One said.
A representative for the US Attorney’s office said it was not immediately clear what the suspect’s motive was.
The hacker did not gain access to credit card account numbers, but about 140,000 Social Security numbers and 80,000 linked bank account numbers were compromised, Capital One said.
About one million social insurance numbers belonging to the company’s Canadian credit card customers were also compromised.
The hacker was able to gain access to the data through a misconfigured web application firewall, the US Attorney’s office said.
Capital One shares fell four percent in late extended trading.