Skip to content

Capital One

Disclosed Mar 20, 20233 years ago16,779 affectedConfirmed

Official notice

What is known

People affected16,779 (as reported by the organization)
DisclosedMar 20, 2023
DiscoveredApr 26, 2023
HappenedFeb 1, 2023
AttackRansomware
Data exposedNot stated
SectorFinance · US
StatusConfirmed

Sources

Source
Washington Attorney General breach notice: Capital Oneatg.wa.gov · Official notice
Oregon DOJ breach notice: Capital Onejustice.oregon.gov · Official notice
Indiana Attorney General 2024 data breach report: Capital Onein.gov · Official notice
Indiana Attorney General 2023 data breach report: Capital Onein.gov · Official notice

Notices filed

WhereFiledPeople
Indiana AGresidents of INMar 20, 20233
Washington AGresidents of WAMay 26, 2023605
Oregon DOJresidents of ORMay 26, 202316,779
Indiana AGresidents of INMay 26, 2023403
Indiana AGresidents of INMar 26, 20243
Indiana AGresidents of INAug 7, 20241

Other breaches at Capital One

BreachAffected
Disclosed Jan 12, 2026Jan 128 months ago12
Disclosed Apr 4, 2025Apr 4, 20251 year ago1
Disclosed Feb 6, 2020Feb 6, 20206 years ago3,740
Cloud intrusion exposes data of 100 million US and 6 million Canadian applicantsFeb 1, 20197 years agoExposed data106M
Disclosed Feb 6, 2017Feb 6, 20179 years agoUnknown
History of this record
  • 2026-09-25 · records: 572 to 16779 · backfill source
  • 2026-09-25 · records: 23 to 572 · backfill source
  • 2026-09-25 · disclosed: 2023-05-26 to 2023-03-20 · backfill source
  • 2026-09-25 · records_basis: empty to organization · backfill source
  • 2026-09-25 · records: empty to 23 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.

Everything about Capital One

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.