Capital One

Disclosed Feb 6, 20206 years ago3,740 affectedConfirmed

What is known

People affected	3,740 (as reported by the organization)
Disclosed	Feb 6, 2020
Discovered	Jun 17, 2020
Happened	Aug 6, 2020
Attack	Not stated
Data exposed	Names, Payment cards, Financial, Social Security numbers
Sector	Tech · US
Status	Confirmed

Source	Kind
Indiana Attorney General 2021 data breach report: Capital Onein.gov · Official notice	Official notice
Indiana Attorney General 2020 data breach report: Capital Onein.gov · Official notice	Official notice
Maine Attorney General breach notice archive: Capital Onemaine.gov · Official notice	Official notice

Breach	Disclosed	Attack	Sector	Status	Affected
Disclosed Jan 12, 2026Jan 128 months ago	Jan 128 months ago	Not stated	Tech	Confirmed	12
Disclosed Apr 4, 2025Apr 4, 20251 year ago	Apr 4, 20251 year ago	Not stated	Tech	Confirmed	1
Disclosed Mar 20, 2023Mar 20, 20233 years agoRansomware	Mar 20, 20233 years ago	Ransomware	Finance	Confirmed	17K
Cloud intrusion exposes data of 100 million US and 6 million Canadian applicantsFeb 1, 20197 years agoExposed data	Feb 1, 20197 years ago	Exposed data	Finance	Settled	106M
Disclosed Feb 6, 2017Feb 6, 20179 years ago	Feb 6, 20179 years ago	Not stated	Tech	Confirmed	Unknown

History of this record

2026-09-25 · data_types: ["names","payment-card","financial"] to ["names","payment-card","financial","ssn"] · backfill source
2026-09-25 · disclosed: 2020-07-16 to 2020-02-06 · backfill source
2026-09-25 · data_types: [] to ["names","payment-card","financial"] · backfill source
2026-09-25 · disclosed: 2020-08-05 to 2020-07-16 · backfill source
2026-09-25 · discovered: empty to 2020-06-17 · backfill source
2026-09-25 · disclosed: 2020-09-22 to 2020-08-05 · backfill source
2026-09-25 · disclosed: 2021-03-19 to 2020-09-22 · backfill source
2026-09-25 · added · backfill source

First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.