a last resort, . . . if it becomes necessary to repossess [a] sports vehicle". Capital One also attributed its assertion of a right to "spoof" as necessary because "sometimes the number is 'displayed differently' by 'some local phone exchanges,' something that is 'beyond our control'". July 2019 security breach Capital One publicly acknowledged on July 29, 2019, that they had found unauthorized access had occurred ten days earlier by an individual who had breached the account and identity security of 106 million people in the United States and Canada. The FBI arrested Paige Thompson, who had previously worked as a software engineer for Amazon Web Services, Capital One's cloud hosting company. Capital One declared that Thompson had accessed about 140,000 Social Security numbers, a million Canadian social insurance numbers; 80,000 bank account numbers, and an unknown number of names and addresses of customers. Capital One began offering free credit monitoring services to those affected by the breach. Thompson's employment at Amazon appears to have ended in September 2016. Amazon stated that the security vulnerability she used to access Capital One could have been discovered by anyone, the information that facilitated her activity was not gained from work at Amazon, and that she gained access via "a misconfiguration of the (Capital One-designed) web application and not the underlying (Amazon-designed) cloud-based infrastructure". Details of the breach Forensic analysis determined Thompson's actual hacking activity occurred in March 2019, then she posted the information to different outlets over the next three months. In April she posted a trove of leaked data along with instructions on how to access the company's credentials for more data extraction. In July a white-hat alerted Capital One to Thompson's hacking activity. Thompson pleaded not guilty to charges of wire fraud and computer fraud and abuse. During the investigations and subsequent data freeze, millions of Capital One accounts were locked; their owners were unable to process financial transactions, meet payments, or gain access to their financial records. Capital One response Critics lambasted the bank's effort to downplay the hack while investigations were ongoing, and described the bank as more concerned about its image than the needs of its clients. Several Capital One customers stated that the first time they heard about the hack was through the media and the bank did not disclose the breach or explain its implications to affected customers. On social media and in the mainstream