A jury finds ex-Amazon engineer Paige Thompson guilty of wire fraud and hacking charges for downloading the personal info of 100M+ Capital One customers in 2019
Paige Thompson's lawyers said she had been looking for cracks so they could be fixed. A jury found her guilty of wire fraud and hacking charges.
Context & Ripple Effects
The verdict closes a three-year arc that began with the 2019 indictment alleging Thompson used exploited servers at Capital One and more than 30 other companies to mine cryptocurrency while inside their infrastructure. At trial, her defense framed her as a "novice white-hat hacker" who was looking for cracks so they could be fixed — an argument the jury rejected on wire fraud and hacking counts.
First-order effects
- Thompson, a former Amazon engineer, now carries felony convictions for downloading personal information on over 100 million Capital One customers, moving the case from trial posture to sentencing.
Second-order effects
- The judge later handed down five years of probation rather than prison, a sentence the DOJ publicly called "very disappointing" — a public split between prosecutors and the bench over how heavily to punish individual breach actors at sentencing.
Third-order effects
- Because the intrusion spanned Capital One plus 30+ other companies' servers, the case stands as a reference point for how courts treat unauthorized access to shared cloud infrastructure — and whether the white-hat defense can ever mitigate liability in breach prosecutions.
The trend: High-profile data breach prosecutions are testing where courts draw the line between security research and criminal hacking, with sentencing outcomes increasingly diverging from prosecutorial demands.