SECTOR PROFILE

Target Sector: Financial Services, Cloud Computing

Court filings, technical advisories, and enforcement actions documenting cyber intrusions against Financial Services, Cloud Computing organizations.

Key Facts

Total Cases

Prosecution records

Identified Losses

$540.0 million

Court & SEC estimates

2 documented prosecution cases targeting the Financial Services, Cloud Computing sector.
Cumulative reported financial losses exceed $540.0 million.
Documented from federal indictments and SEC Form 8-K disclosures.

Documented Incidents

convicted 2019-07-29

U.S. v. Paige Thompson (Capital One Cloud Breach)

Former Seattle cloud engineer who identified misconfigured web application firewalls to gain unauthorized access to Capital One's Amazon Web Services storage buckets, exfiltrating 106 million customer credit card applications.

3 techniques View case details →

sentenced 2019-08-28

U.S. v. Paige Thompson (Capital One AWS Cloud SSRF Breach)

Former Amazon Web Services systems engineer convicted under the Computer Fraud and Abuse Act for exploiting a misconfigured open-source Web Application Firewall (WAF) using Server-Side Request Forgery (SSRF) to query AWS metadata services and steal over 100 million credit card applications from Capital One.

3 techniques View case details →