Former AWS engineer found guilty of wire fraud and computer intrusions in 2019 Capital One hack

(Bigstock Photo)

An ex-Amazon Web Services engineer accused of a massive hack in 2019 was found guilty of seven federal crimes on Friday in the U.S. District Court of Seattle.

Prosecutors showed how Paige Thompson built a tool that identified misconfigured AWS accounts and used them to access data from more than 30 entities, including Capital One, an AWS customer. More than 100 million Capital One customers were affected. It was one of the largest breaches of a major financial service.

A jury found that Thompson violated the Computer Fraud and Abuse Act, which drew attention last month after the Justice Department revised its policy for charging cases under the Act and said “good-faith security research should not be charged.”

Thompson was found guilty of wire fraud, five counts of unauthorized access to a protected computer, and damaging a protected computer. She used the illegal access to earn income from cryptocurrency mining software that was planted on new servers, according to the suit. Thompson was found not guilty of access device fraud and aggravated identity theft.

“Ms. Thompson used her hacking skills to steal the personal information of more than 100 million people, and hijacked computer servers to mine cryptocurrency,” U.S. Attorney Nick Brown said in a press release.  “Far from being an ethical hacker trying to help companies with their computer security, she exploited mistakes to steal valuable data and sought to enrich herself.”

Thompson worked at Amazon as a systems engineer from 2015 to 2016.

Capital One ended up paying $80 million in fines and $190 million to settle a class-action lawsuit related to the hack.

Thompson, 36, is scheduled for sentencing on Sept. 15. Wire fraud is punishable by up to 20 years in prison; illegally accessing a protected computer and damaging a protected computer are punishable by up to five years.

See also  In SEC complaint, union coalition alleges Amazon deceived investors with ‘cherry-picked’ injury data

Related Posts

Report: Veteran sports broadcaster Al Michaels to call Amazon’s NFL games on Thursdays

Al Michaels in Los Angeles in 2018. (BigStock Photo) Al Michaels, the longtime NFL play-by-play broadcaster, is Amazon’s pick to call “Thursday Night Football” games streaming on…

Seattle Pride drops Amazon sponsorship, cites company’s donations to politicians that support ‘anti-LGBTQIA+’ legislation

Seattle Pride is initiating a process to evaluate its corporate sponsors and will not partner with Amazon for its 2022 pride parade. (Seattle Pride Photo) Seattle Pride…

Amazon opens supply hub for Ukrainian refugees, its largest humanitarian aid facility ever

Amazon is helping to store and distribute supplies to aid Ukrainian refugees in European countries. (Amazon Photo) Amazon is converting warehouse space in Slovakia, previously used to…

Amazon names Al Michaels and Kirk Herbstreit as the voices of ‘Thursday Night Football’ on Prime

(Amazon Image) Amazon has officially announced that veteran sports play-by-play announcer Al Michaels and college football analyst Kirk Herbstreit will be the broadcast duo for “Thursday Night…

Amazon Games studio head Mike Frazzini is leaving the company

Mike Frazzini. (GeekWire FIle Photo) Mike Frazzini, the head of Amazon Games, is stepping down from his position. Bloomberg reported Frazzini has told staff at Amazon that…

Unlock Venture Partners puts its portfolio in the metaverse

A Los Angeles- and Seattle-based funding agency could also be the first to place its personal portfolio web page in the metaverse. “So far as we all…

Leave a Reply

Your email address will not be published. Required fields are marked *