A Case Study of the Capital One Data Breach

Neto, Nelson Novaes; Madnick, Stuart E.; Paula, Anchises Moraes G. de; Borges, Natasha Malara

doi:10.2139/ssrn.3542567

Cited by 18 publications

(22 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Because of the rarity of details concerning information security management, analyzing the detailed study [2] would yield interesting insights. Their study aligns with our vision since their initial hypothesis: Renowned standards do not provide enough guidance for organizations for implementation nor incident management.…”

Section: Methodological Considerationmentioning

confidence: 99%

“…Figure 5 shows the different security tasks and their responsible. Each task is the implementation of a necessary NIST security control [2]. In the case of the layoffs and human resource removal, the tasks would remain and it would be apparent that they need to be reassigned in order to maintain security controls.…”

Section: Research Questionmentioning

confidence: 99%

“…However, our systematic review [1] of the literature showed that even if many standards and approaches are available, implementation remains problematic. The lack of implementation feedback further makes the study of a real case such as the Capital One Financial Corporation breach [2] more appealing to discuss. We postulate that this issue is due to two major aspects: system complexity and human behavior.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

An Operational Responsibility and Task Monitoring Method: A Data Breach Case Study

Assoul¹,

Rabii²,

Roudiès³

2021

Adv. sci. technol. eng. syst. j.

View full text Add to dashboard Cite

As a result of digitalization, services become highly dependent on information systems thus increasing the criticality of security management. However, with system complexity and the involvement of more human resources, it becomes more arduous to monitor and track tasks and responsibilities. This creates a lack of visibility hindering decision making. To support operational monitoring, we propose a method composed of i) a core of security concepts from International Standard Organization (ISO) standards ii) a graphical modeling language iii) a guiding process and iv) a tool that provides verification through formal Object Constraint Language (OCL) queries. Applying this method to the case of the Capital One data breach showcases incident prevention through task supervision. The resulting work product is a formal comprehensive map of assets, actors, tasks and responsibilities. The SysML formalism allows different actors to extract information from the map using OCL queries. This allows for regular task and responsibility verification thus closing any window of attack possible.

show abstract

Section: Methodological Considerationmentioning

confidence: 99%

Section: Research Questionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

An Operational Responsibility and Task Monitoring Method: A Data Breach Case Study

Assoul¹,

Rabii²,

Roudiès³

2021

Adv. sci. technol. eng. syst. j.

View full text Add to dashboard Cite

show abstract

“…While not a direct result of AI, it demonstrates the vulnerability of cloud storage, a technology often intertwined with advanced AI deployments [5]. In addition to the immediate financial impact, data breaches can seriously undermine trust in financial institutions, and once that trust is lost, it can be very difficult to recover.…”

Section: Data Risksmentioning

confidence: 99%

Challenges and Countermeasures of Artificial Intelligence Technology in the Application of Financial Industry

Zhou

2023

AEMPS

View full text Add to dashboard Cite

In recent years, the rapid growth of Artificial Intelligence has become a household name and has developed its use in various fields. Today's AI is permeating all aspects of the financial sector and has become a force for change. This paper summarizes the history of artificial intelligence and delves into the current state of its integration into the financial sector. The capabilities of AI herald a new era of financial innovation but also pose a number of risks and challenges. This paper combines case studies and literature to focus on the data risks faced by AI in finance, the complexity of "black box" algorithms, financial and legal regulatory challenges, and data privacy and ethical issues. As financial institutions increasingly rely on AI-powered solutions, understanding these potential risks becomes critical. This paper concludes with some countermeasures and recommendations to address the potential risks. By deploying AI through collaborative efforts, rigorous oversight, and on high-quality data, the financial community can capitalize on the power of AI to allow fintech to lead the transformation of the industry.

show abstract

“…This should also be conducted by PT Tokopedia. (Nelson Novaes, 2020) The Tokopedia data breach case was caused by the actions of a third party who broke into the Tokopedia electronic system. Thus, if it refers to Article 14 paragraph (5) Government Regulations concerning the Implementation of Electronic Systems and Transactions (PP PSTE), Tokopedia only needs to provide accountability in the form of a written notification to the owner of the personal data that there has been a failure in protecting personal data.…”

Section: Personal Data Breach In the Perspective Of Corporate Respons...mentioning

confidence: 99%

Corporate Responsibility For Personal Data Breach Cases

Purwoto¹,

Prasetyo²,

Sulistyawan³

et al. 2023

IJMRA

View full text Add to dashboard Cite

Arrangements regarding the protection of personal data are part of the provisions contained in criminal law to fulfill the human rights of the Indonesian people. In Indonesia, arrangements regarding this matter are regulated in several regulations, one of which is the statutory regulations. However, the problem is when the effectiveness of these regulations is questioned by the emergence of some cases related to breach of personal data, one of which was experienced by PT Tokopedia. Departing from this background, this research aims to discuss more deeply about these problems using a case study approach.

show abstract

A Case Study of the Capital One Data Breach

Cited by 18 publications

References 0 publications

An Operational Responsibility and Task Monitoring Method: A Data Breach Case Study

An Operational Responsibility and Task Monitoring Method: A Data Breach Case Study

Challenges and Countermeasures of Artificial Intelligence Technology in the Application of Financial Industry

Corporate Responsibility For Personal Data Breach Cases

Contact Info

Product

Resources

About