PHP Vulnerability Responses by Company

Capital One, National Association

Companies / web services
Aliases / services
キャピタル・ワン / Capital One / Capital One Bank (USA), National Association / Capital One, National Association
Official website
https://www.capitalone.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

US credit-card applicant/customer data

Response status
Not listed
Response information checked
2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

A March 2019 intrusion exposed application information. The notice excludes card numbers and login credentials and records additional affected-person notifications in 2021.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Enable transaction alerts and report unfamiliar activity using the number on your card. Beware incident-related calls seeking personal information.

Official service URL

Source URLs

  1. 2019-07 / 2022-04 official security noticehttps://www.capitalone.com/digital/facts2019/Service and operation documentation
  2. OCC identification of banks and action concerning the 2019 incidenthttps://www.occ.gov/news-issuances/news-releases/2020/nr-occ-2020-101.htmlService and operation documentation
Related official sources
  1. Capital One bank-merger agreement amendment (October 1, 2022)Official information directoryNames Capital One, National Association and confirms the October 1, 2022 merger and succession to Capital One Bank (USA) rights and obligations.
  2. 2019-07 / 2022-04 official security noticeOfficial notice; link to this PHP incident unconfirmedA March 2019 intrusion exposed application information.
  3. OCC identification of banks and action concerning the 2019 incidentOfficial notice; link to this PHP incident unconfirmedNames the two Capital One banks involved and describes cloud-migration risk-management failures.

Comments