Paige Thompson, 33, was arrested in connection with the breach, the Justice Department said Monday. The department claims that Thompson "posted on the information sharing site GitHub about her theft of information from the servers that store Capital One data."
Thompson had previously worked as a software engineering engineer and was able to gain access by utilizing a misconfigured web application firewall, the DOJ said.
"I sincerely regret the understandable concern this incident must cause to those affected, and I am committed to doing it right," CEO Richard Fairbank said in a statement.
violations hit about 1
However, "no credit card account number or login information was compromised and over 99% of Social Security numbers were not compromised," the company said.
Capital One said it will notify individuals affected by the breach and will make free credit monitoring and identity protection available. The company expects to incur between $ 100 million and $ 150 million in costs related to the hacking, including customer alerts, credit monitoring, technical costs and legal support due to the hacking.
It is not immediately clear whether Thompson has a lawyer representing her.