Federal prosecutors are investigating whether the alleged Capital One hacker, Paige Thompson, also stole data from more than 30 other companies and organizations, according to a new court filing.
The feds point to servers seized from Thompson's home when investigators arrested the 33-year-old Seattle native last month. The servers "include not only data stolen from Capital One, but also multiple terabytes of data stolen by Thompson from more than 30 other companies, educational institutions and other entities," prosecutors said in the court filing.
Federal investigators are still examining whether the data from the other victims holds any sensitive information. "For example, much of the data appears not to be data containing personal identifying information," the prosecutors said. Nevertheless, the US is preparing to charge Thompson with additional crimes based on the data found on the seized server.
"Although not all of those intrusions involved the theft of personal identifying information, it appears likely that a number of the intrusions did," prosecutors added.
Thompson, a former Amazon Web Services engineer, was arrested last month on charges she exploited a vulnerability in Capital One's databases to steal credit card application documents from 106 million people, most of them in the US. In a Slack channel she used prior to her arrest, Thompson indicated she had also hacked several additional organizations, including Ford, Vodafone, Infoblox, and the Ohio Department of Transportation.
The court filing refrains from naming the other companies and groups Thompson allegedly collected data from. However, the Ohio Department of Transportation told PCMag it appears Thompson pulled only public data from its servers. VodaFone and Infoblox say they've found no indications that they were breached.
According to Tuesday's court filing, Thompson claims she never sold or shared the data she allegedly stole from Capital One and the other companies. So far, federal agents have uncovered no evidence to suggest she's lying, but they continue to investigate.
In the court filing, the prosecutors called for Thompson's detention on fears she could commit additional cyber intrusions or attempt to flee the country. The prosecutors also cited Thompson's "long history" of threatening to kill others and to commit "suicide by cop."
Thompson is scheduled to appear in court for her detention hearing on Thursday.