DEFENDANT RECORD
Paige Adele Thompson
convicted
Aliases: erratic
Perpetrator of Capital One cloud data breach; convicted of wire fraud and computer intrusion.
Key Facts
Status
CONVICTED
Current legal state
Sentence
N/A
Pending / None
Restitution
$0
Mandatory restitution
Cases
2
Federal dockets
- Legal Disposition: convicted.
- Nationality: United States.
- Total Imprisonment: Pending / None.
- Court Restitution: None ordered.
Prosecution Matters Involving This Defendant
convicted 2019-07-29
U.S. v. Paige Thompson (Capital One Cloud Breach)
Former Seattle cloud engineer who identified misconfigured web application firewalls to gain unauthorized access to Capital One's Amazon Web Services storage buckets, exfiltrating 106 million customer credit card applications.
U.S. District Court for the Western District of Washington
View case details →
sentenced 2019-08-28
U.S. v. Paige Thompson (Capital One AWS Cloud SSRF Breach)
Former Amazon Web Services systems engineer convicted under the Computer Fraud and Abuse Act for exploiting a misconfigured open-source Web Application Firewall (WAF) using Server-Side Request Forgery (SSRF) to query AWS metadata services and steal over 100 million credit card applications from Capital One.
U.S. District Court for the Western District of Pennsylvania and Western District of Washington
View case details →