Data Breach Notifications

Entity Information

  • Type of Organization: Financial Services
  • Entity Name: Capital One
  • Street Address: 1608 Capital One Drive
  • City: McLean
  • State, or Country if outside the US: VA
  • Zip Code: 22102

Submitted By

  • Name: Adam Cohen
  • Title: Associate General Counsel
  • Firm name (if different than entity):
  • Telephone Number: (571) 308-5971
  • Email Address: dse_contact@capitalone.com
  • Relationship to entity whose information was compromised: Associate General Counsel

Breach Information

  • Total number of persons affected (including residents): 16,779
  • Total number of Maine residents affected: 222
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified:
  • Date(s) Breach Occured: 02/01/2023-02/04/2023
  • Date Breach Discovered: 04/26/2023
  • Description of the Breach:
    • External system breach (hacking)
  • Information Acquired - Name or other personal identifier in combination with: Financial Account Number or Credit/Debit Card Number (in combination with security code, access code, password or PIN for the account)

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: 5/26/2023
  • Copy of notice to affected Maine residents: DSE 608329 ME State Notification.pdf
  • Date of any previous (within 12 months) breach notifications:
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: The impacted information was the result of a security incident at NCB Management Services, Inc. (“NCB), a national accounts receivable company that provides certain account services to financial institutions. As Capital One indicated in its notice to impacted residents, as part of its response to this incident, NCB has secured the services of Kroll to provide two (2) years of free identity monitoring services, which includes credit monitoring, $1 million identity fraud loss reimbursement, fraud consultation, and identity theft restoration.