In July 2019, Capital One Financial Corporation announced a large bank data theft in America as the data of more than 100 million credit cards were stolen. This affected all the customers applying for credit cards between 2005 and 2019. The exposed data included data on credit card limits, credit scores, credit history, credit balances, Social Security numbers, home addresses, and bank account numbers, but no credit card numbers or access credentials were exposed.
This happened when a hacker exploited a configuration vulnerability in the company's digital infrastructure and could allegedly access the data during March and April 2019. An ex-employee of Amazon Web Services was found guilty in June 2022, of multiple crimes related to this breach.