Amazon Contacted Customers Named by Alleged Capital One Hacker
(Bloomberg) -- Amazon.com Inc. said it has reached out to cloud-computing customers mentioned in online postings by the accused perpetrator of a data breach of Capital One Financial Corp., but found no proof she was able to exploit similar flaws at those companies.
Paige Thompson, a former Amazon Web Services employee, was arrested on Monday and charged with computer fraud for accessing data of an estimated 100 million people in the U.S. from Capital One by exploiting a misconfigured firewall that gave her access to some of the data the firm stored on AWS.
In a post on the online messaging service Slack, Thompson appeared to refer to other improperly secured Amazon databases she was able to access, according to a person who had seen the conversation and shared it with Bloomberg. That message was reported earlier by cybersecurity blogger KrebsOnSecurity.
Grant Milne, an AWS spokesman, said the company had “reached out to the customers mentioned in online forums by the perpetrator to help them assess their own logs for any evidence of an issue.”
“At this point, we do not have proof that the perpetrator in the Capital One incident found similar application flaws in a few other customers,” Milne said Wednesday in an email. He didn't name the customers.
The Wall Street Journal, which earlier Wednesday reported Amazon's outreach, said that UniCredit SpA, one of the companies named in the Slack posting, was investigating the possibility of a similar data breach.
To contact the reporters on this story: Matt Day in Seattle at mday63@bloomberg.net;Nico Grant in San Francisco at ngrant20@bloomberg.net
To contact the editors responsible for this story: Jillian Ward at jward56@bloomberg.net, Andrew Pollack
©2019 Bloomberg L.P.
-
A New Samvat Wishlist: Inclusive Prosperity And Human Development
India has strengthened its economic foundations through infrastructure, digital access and enterprise. Its next growth chapter must deepen productivity, create better livelihoods and widen participation in prosperity.
-
Love, Sex Aur Dhokha: The Audacious Plot To Spy On Jensen Huang
A Taipei dinner, a Singapore chip buyer and a suspected Chinese asset: inside the alleged spy operation that got close to NVIDIA's Jensen Huang.
-
Ten Things I Learnt This Samvat
Patience can be a trap. Cheap stocks can stay cheap. Leverage can wipe you out. What did Samvat 2082 teach us? Niraj Shah writes on 10 lessons from the year gone by.
-
Talking Points This Week: Tech Nerves, FII Buying, And A Faraway Banking Shock
The global markets are not shining this Diwali. The exception in the large markets is, India.
-
Midterm Rally Lasted A Day. The Hard Reality Of A Divided US May Last Two Years | Opinion
Between a contested AI boom, a debt ceiling that arrives in 2027 and a president with every incentive to act alone, the next two years may prove more volatile than the first day's rally suggests.
-
Blue Wave Will Derail the AI Trade but Won't Dismantle the AI Era | Unhedged Position
The Democrats' sweep of the US Congress will see politics collide with economic forces both over the long and short term.
-
It's Time To Take The GST Council's Bet On Trust Global
Payment records can prove India's services exports, and clear, proportionate rules can bring foreign digital sellers into the tax net.
-
Opinion | India at 38: From Innovation Overperformer to Innovation Powerhouse
India now has 453 VC-backed deep science startups, 18 of them late-stage, after 117 percent growth since 2020. Laurus Labs, at USD 9.3 billion, is the most valuable deep science company in any middle-income economy outside China.
-
Navigating Energy Crossroads: S Jaishankar's Call For Diversified Supply Chains At G20 Ministerial Meeting
As geopolitical fault lines continue to test maritime trade routes and commodity flows, Jaishankar's message remains pertinent: true economic resilience requires open markets, protected transit lines, and a genuine commitment to multilateral cooperation rather than coercion.
