{"product_id":"capital-one-breach-shirt-2019-ssrf-cloud-metadata-graphic-tee-unhacked","title":"EXHIBIT 0029 — CAPITAL ONE","description":"\u003cp\u003eNobody broke in. The firewall was asked for the keys, and it went and got them.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eOn 22 and 23 March 2019 a web application firewall in front of Capital One's cloud environment was persuaded to make a request on someone else's behalf. The request went to 169.254.169.254, the address every AWS instance uses to ask about itself, and the answer was the temporary credentials for the role the firewall was running as.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eThat role could list and read storage buckets, so it did. The take was credit card applications going back to 2005: roughly 100 million people in the United States and 6 million in Canada, names, addresses, dates of birth, income, credit scores. About 140,000 Social Security numbers, about 80,000 linked bank account numbers, about a million Canadian Social Insurance Numbers.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eCapital One did not find it. On 17 July 2019 a stranger emailed the company's responsible disclosure address to say the data appeared to be sitting in a public GitHub post. The company confirmed it on 19 July and announced it on 29 July.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eThe firewall had been doing its job. Every request it inspected, it inspected. It was the request it made itself that nobody had thought to inspect, because it came from inside the perimeter, from a component whose whole purpose was to be trusted.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003ePaige Thompson, a former Amazon Web Services engineer, was convicted of wire fraud and computer intrusion in June 2022. The Office of the Comptroller of the Currency fined Capital One $80 million. The customer class action settled for $190 million.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eEvery credential in the chain was valid. Every one was issued on purpose.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eEXHIBIT 0029 \/ CAPITAL ONE \/ 2019\u003c\/p\u003e","brand":"Printify","offers":[{"title":"Charcoal \/ S","offer_id":54516338884892,"sku":"82270215040286264289","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ S","offer_id":54516338917660,"sku":"15113680077074564211","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ S","offer_id":54516338950428,"sku":"24466244793385967033","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ S","offer_id":54516338983196,"sku":"20945694135002020345","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ S","offer_id":54516339015964,"sku":"72167059182161924952","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ M","offer_id":54516339048732,"sku":"20745690958036243526","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ M","offer_id":54516339081500,"sku":"28172295086700931822","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ M","offer_id":54516339114268,"sku":"26192776045024856785","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ M","offer_id":54516339147036,"sku":"13484841269481468881","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ M","offer_id":54516339179804,"sku":"27252858798798520074","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ L","offer_id":54516339212572,"sku":"21492992297487150786","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ L","offer_id":54516339245340,"sku":"31846593248220685342","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ L","offer_id":54516339278108,"sku":"67014947559775706820","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ L","offer_id":54516339310876,"sku":"31905734856773665262","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ L","offer_id":54516339343644,"sku":"18374828738120300744","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ XL","offer_id":54516339376412,"sku":"21705891064768901827","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ XL","offer_id":54516339409180,"sku":"23088957994788438466","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ XL","offer_id":54516339441948,"sku":"29332109440246479992","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ XL","offer_id":54516339474716,"sku":"29236667447503037983","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ XL","offer_id":54516339507484,"sku":"69355740222313908380","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ 2XL","offer_id":54516339540252,"sku":"76676008455832075207","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ 2XL","offer_id":54516339573020,"sku":"33480906553581624670","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ 2XL","offer_id":54516339605788,"sku":"19758284138737222256","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ 2XL","offer_id":54516339638556,"sku":"15311744282136364498","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ 2XL","offer_id":54516339671324,"sku":"31054291686212835482","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ 3XL","offer_id":54516339704092,"sku":"10409829009648504837","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ 3XL","offer_id":54516339736860,"sku":"64719885152026959231","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ 3XL","offer_id":54516339769628,"sku":"21582165450793219989","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ 3XL","offer_id":54516339802396,"sku":"17511708148752876450","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ 3XL","offer_id":54516339835164,"sku":"29502879963784162224","price":24.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0961\/8184\/6300\/files\/12029280357207381325_2048.jpg?v=1788443263","url":"https:\/\/unhacked.shop\/products\/capital-one-breach-shirt-2019-ssrf-cloud-metadata-graphic-tee-unhacked","provider":"Unhacked","version":"1.0","type":"link"}