A Case Study of the Capital One Data Breach
summary
Technical postmortem of the 2019 Capital One breach maps attacker steps (SSRF against a misconfigured WAF, stolen internal creds, exfiltration from ~700 S3 buckets) to defenses and finds gaps: 100+ million customers affected, ~30 GB of data taken, four months to detect, and high staff turnover (≈130 security departures) that undermines response. The analysis uses MITRE ATT&CK and maps 61 NIST controls that could have blocked stages, recommends stronger vulnerability management, least-privilege, continuous cloud audit and a governance operations center for real‑time compliance validation.
AI-written summary · about
chapters (7)
- 0:00Research introduction
- 1:51Capital One incident context
- 5:58Attack analysis
- 9:41Control failure assessment
- 13:46Risk management findings
- 15:43Key organizational insights
- 20:34Recommendations and closing
related talks
40mData Breaches: Barbarians in the Throne Room
26mPrivacy Issues in Big Data Processing in light of Data Breaches
26mCloud Security Lessons
27mProtecting Businesses from Breaches: Simple Lessons Still Unlearned
37mData Breaches: Barbarians in the Throne Room
57mLessons From Billions of Breached Records
25mTopics of Interest: An Attackers View on APAC's 2021 Three Major Breaches
22mSecurity and Risks