Paige Thompson, a 36-year-old Amazon Web Services (AWS) employee, has been accused of hacking into secure systems. She was also convicted of data theft and payment fraud. It is now up to the judge to determine the penalty.
That reports the American news agency Bloomberg, which has seen documents from the lawsuit.
US bank seriously affected
The woman worked in Amazon’s cloud division. In her spare time, she had developed a tool to track AWS accounts that were misconfigured. Thus, she was able to break into the accounts of thirty Amazon customers. One of those clients was Capital One Bank, one of the largest banks in the United States. Once logged in, she stole personal data and information from more than a hundred million of the bank’s customers.
Capital One was reprimanded by the regulator for this data breach, which occurred in 2019. The bank had to pay more than $80 million in fines. In order not to constantly walk in and out of court, the bank reached a settlement of $190 million with the victims. The leak cost Capital One a total of more than $270 million.
Jury finds suspect guilty of computer breach and payment fraud
Thompson, who gave himself the username “erratic,” was not only guilty of data theft. The prosecutor proved that the woman installed mining software on Amazon servers to make crypto coins. The proceeds ended up in the suspect’s online wallet.
Texts and messages she posted on online forums show that the woman was proud of her criminal activities. “She wanted data, she wanted money and she wanted to brag about it,” the prosecutor said in his closing statement.
After ten hours of deliberation, the 12-member jury reached its verdict. According to the jury members, the 36-year-old former employee was guilty of computer intrusion (hacking), damaging a protected computer and payment fraud. She was acquitted of identity theft and access device fraud
Suspect faces high prison sentence
At this point, only the jury has said that Thompson has been found guilty of committing a number of offences. What punishment the woman can face is up to the judge. He will hand down the verdict on September 15. The judge can only impose a prison sentence of twenty years for payment fraud.
Catch up on more articles here
Follow us on Twitter here