Paige Thompson

Profile narrative

The threat actor known by the alias Paige Thompson is located in the United States. The actor came to public attention through a single reported intrusion that targeted a major financial services provider. No other aliases or affiliations have been disclosed in the available sources.

On July 19, 2019, the actor exploited a configuration vulnerability within the victim's environment, gaining access to data stored between 2005 and 2019. The compromised information included names, addresses, phone numbers, email addresses, dates of birth, and self‑reported income from credit‑card applications. In addition, the actor obtained credit‑score data, credit limits, account balances, payment histories, and fragments of transaction records from twenty‑three days spread across 2016, 2017, and 2018. The company stated that it became aware of the unauthorized access on the same day and immediately fixed the exposed weakness.

The breach also exposed approximately one million Canadian social insurance numbers, 140 000 United States social security numbers, and 80 000 bank account numbers. After detecting the activity on July 19, the organization addressed the vulnerability and the actor was arrested and placed in custody. Public statements from the victim indicated that, to date, there is no evidence the stolen data was used for fraud or further disseminated.

Incidents

Attributed incidents are available to members.