Jump to content

Sign in to follow this  
cashnocredit

GF's Capital One CC Account was hacked last night

Recommended Posts

She got an SMS from Cap One asking if she had authorized a >1k purchase for a MLM purchase. She hadn't and clicked no.

 

She checked her email and had two messages from Capital One including one referencing the above MLM attempted purchase.

The second message  stated: "Your username, xxxxxx, was looked up on August 6, 2019."  If you did not recently look up your username...…"

 

WTF does that mean?" How does one "look up" a username for a Cap One account? You have to have that plus a password to login so how can anyone lookup a username? Both she and I have short, email usernames, just our last names and initials. So usernames are all over the net and strong passwords are critical.

 

Next she tried to login to her Cap One Account. Password not recognized. So either Cap One disabled the online account (unlikely) or the hacker was able to get access to her Cap One Account, possibly through social engineering over the phone or, worse, had taken over her email account (scary).

 

So I'm thinking her email account was hacked and the hacker emailed a request to Cap One saying they lost the password. But this was not the case. Checking recent activity, the only login was the one she made to check her email recent activity. She uses a very strong password for both Cap One and email and they are not used for any other accounts. Major relief. But I need to her to use 2FA as well

 

She called CSR, reset her online password with the CSR, and reported the fraud attempt, (they didn't authorize the MLM purchase) as well as an actual fraud, a much lower dollar amount to box.com done shortly after the MLM attempt C1 is sending an new card and gave her tracking info.

 

C1 CSR was very professional in getting the required info and taking care of her account.

 

Anyone else received email from Cap One stating: "Your username, (username), was looked up on (date)…? Any idea what it is supposed to mean?

Share this post


Link to post
Share on other sites

3 hours ago, hegemony said:

could the look-up be a crap1 insider?

Might be associated with the recent Cap One hack. Lots of emails and other info released by an Cap One insider. It was discovered when some of the posted info was seen by others on GitHub. Doesn't appear the hacker tried to sell in on the dark web but lots of hackers regularly scan public repos on GitHub. Lots of people leave credentials in their code by accident.

Share this post


Link to post
Share on other sites

Lookup username... when you go to capitalone.com and click Forgot Username or Password link it brings you to a page where you can enter name, DOB, and SSN to recover your username in case you forgot it.

 

Yes there was a recent data breach from Capital One but there were hundreds more before that, so who knows where the criminals got the info.

 

Share this post


Link to post
Share on other sites
16 hours ago, chrishillson said:

Lookup username... when you go to capitalone.com and click Forgot Username or Password link it brings you to a page where you can enter name, DOB, and SSN to recover your username in case you forgot it.

 

Yes there was a recent data breach from Capital One but there were hundreds more before that, so who knows where the criminals got the info.

 

Thanks. That explains what happened for the most part. It does mean she should be monitoring her credit since someone now knows her ID, DOB, and SS#. That info is widely available for pretty much any of us but this crook now knows she has a Cap One card. 2FA is "sometimes" available for Cap One. She also pulled her 3 CRs and nothing unusual. Given her email access was clear, I'm no longer too concerned.

Share this post


Link to post
Share on other sites

I'd go ahead and get her to freeze her credit for the time being if she's not planning to apply for a loan or a new account any time soon.  Now would be a good time to change passwords for all the major accounts she holds, as well as her email.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  




About Us

Since 2003, creditboards.com has helped thousands of people repair their credit, force abusive collection agents to follow the law, ensure proper reporting by credit reporting agencies, and provided financial education to help avoid the pitfalls that can lead to negative tradelines.
×
×
  • Create New...

Important Information

Guidelines