According to Capital One, the breach on March 22 and 23, 2019, led to the hacker gaining access to personal data related to credit card applications from 2005 to early 2019 for consumers, applicants and small businesses. Capital One discovered the breach on July 19th. The personal data disclosed included names, addresses, dates of birth, credit worthiness, transaction data, social security numbers and linked bank account numbers.
According to Capital One, about 140,000 social security numbers and 80,000 linked bank account numbers were reported. And for Canadian credit card customers and claimants, about 1 million Social Security numbers. However, Capital One said the hack revealed no credit card account numbers or credentials.
In response, Capital One announced that it would notify customers and credit card applicants whose data was disclosed in the breach, and the Department of Justice announced that a Seattle-based engineer was being sued for theft.
Learn whether you've been affected by the Capital One privacy breach and what you can do to protect yourself.
How to Determine if Your Information Was Stolen
Capital One said that US persons whose social security numbers or linked bank account numbers were part of the hack are contacted by letter. Those affected can probably expect a week from 5 August. Currently, Capital One does not have a website that you can check for yourself, unlike the Equifax tool, which lets you know if you were involved in a data breach.  Be wary of emails and phone calls from fraudsters who pose as Capital One or government officials asking for credit card or account information, your Social Security number, or other personal information.
What Capital One Is Doing Against The Hack
Capital One claimed to have fixed the exploit of the hacker used to access the data and worked with the federal prosecution authorities on the violation. The bank announced that it would appeal to customers involved in the hack and provide free credit monitoring and identity protection to customers affected by the breach.
How to Audit Your Credit Report for Fraud
You do not have to wait for contacting Capital One: you can now take multiple steps to look for fraud.
Monitor your credit reports. Receive a free credit report each year from the three major credit bureaus: Equifax, Experian and TransUnion. (Note that Equifax recovers after its own.) Look in your report for unusual or unfamiliar activities, such as: For example, after the appearance of new accounts that you have not opened. Watch your credit card accounts and bank statements for unexpected charges and payments.
Sign up for a credit monitoring service. Select awhich constantly monitors your credit reports through major credit bureaus and notifies you when unusual activity is detected. To facilitate monitoring, you can set up fraud alerts that notify you when someone tries to use your identity to create credit. A – or you can use a free service such as . Capital One said it will provide free credit monitoring and identity protection to all affected customers.
What if you suspect you are a victim of fraud or identity theft?
Once you suspect your identity card has been stolen, you can take steps to stop unauthorized indictments and restore your identity.
Place a fraud alert. If you suspect fraud, contact each of the credit reporting companies: Equifax, Experian and TransUnion. The warning notifies creditors that you have been the victim of fraud and tells them that you are indeed making new loan requests on your behalf. You can create an initial fraud notification that will remain in your credit report for 90 days, or an advanced fraud notification that will remain in your credit report for seven years. Placing a fraud alert does not affect your credit rating.
Contact fraud departments. For any business or credit card company that believes that an account has been opened or charged without your knowledge, contact the Fraud Section. Although you are not responsible for any fraudulent charges on an account, you must report suspicious activity immediately.
Freeze your balance. If you do not want to prevent anyone from providing credit without your permission and requesting loans and services on your behalf, you can freeze your balance. You must apply for freeze at each of the three credit bureaus, Equifax, Experian and TransUnion. To apply for a new balance, you must once again freeze your balance with any credit bureau. You can either apply for a temporary release of the frost or let it thaw permanently.
Document everything. Keep copies of all documents, issues and records of your conversations about the theft.
Create a recovery plan. The Federal Trade Commission has a useful tool for reporting identity theft and restoring your identity through a personal recovery plan.