Capital One Fined $80 Million Over 2019 Hack

Cash 1 has agreed to pay back $80 million to settle charges stemming from the 2019 hacking incident that uncovered details of far more than a hundred million prospects, a person of the greatest assaults concentrating on fiscal details at any time.

In a consent purchase, the Workplace of the Comptroller of the Currency reported it assessed the civil penalty based on the bank’s failure to build effective chance administration prior to migrating information and facts engineering operations to the cloud, and because of to the bank’s failure to right deficiencies in a timely way.

“While the OCC encourages dependable innovation in all banking companies it supervises, sound chance administration and inside controls are crucial to making sure lender operations stay harmless and sound and adequately guard their prospects,” the OCC reported.

The regulator reported the bank’s lax procedures dated back again to 2015.

At the similar time, the Federal Reserve submitted a cease and desist purchase against Cash 1 as element of the consent purchase the lender entered into with it and the OCC.

As element of that purchase, the board of directors of Cash 1 has 90 times to post a approach to enhance chance administration, inside governance, and controls. The lender will also have to give quarterly updates to the Fed demonstrating its development.

In July 2019, a 33-yr-previous previous Amazon web services personnel from Seattle, Paige Thompson, was arrested and charged in link with the theft, which uncovered Social Stability figures, credit score card applications, residence addresses, credit score scores, and the lender account figures of 80,000 secured credit score card prospects.

Thompson has pled not guilty.

“Safeguarding our customers’ information and facts is crucial to our position as a fiscal establishment,” a Cash 1 spokesperson reported in a assertion. “In the yr due to the fact the incident, we have invested important added means into additional strengthening our cyber defenses and have built significant development in addressing the requirements of these orders.”

Cash 1, hacking, Chance Management