About the case
Capital One agreed to a $190 million settlement after a former AWS engineer exploited a misconfigured firewall and accessed personal data for about 98 million U.S. consumers and applicants. The breach included Social Security numbers and bank-account numbers for some applicants, along with contact and application information for a much larger group. The settlement is useful as a benchmark for modern data-breach litigation because it combined cash relief, identity-defense services, and restoration services. The claim filing period has closed, but the official settlement site continues to explain remaining identity-protection benefits and the final approval posture.
In re Capital One Consumer Data Security Breach Litigation, MDL No. 2915 · E.D. Va.