The ex-Amazon employee who allegedly hacked into the 5th largest credit card company in the US posted about it online, the FBI says.
The criminal complaint alleges Thompson posted that she hacked Capital One on the code-sharing site GitHub.
Martini found a Slack channel where he alleges Thompson posted incriminating messages about the information theft.
Through open source research, Martini found a group organized by Thompson on Meetup, an online platform where users can build communities, according to the 12-page complaint.
The Meetup group had a invitation code to a Slack channel, which is a service for team collaboration. One of the users, named "erratic," posted "a list of files that [the user] claimed to possess" on June 26, according to the complaint.
A screenshot of the Slack conversation showed one of the members warning user "erratic" not to go to jail, and "erratic" responds saying "I wanna get it off my server thats [sic] why Im [sic] archiving all of it," referring to the stolen information.
The complaint alleges that the username "erratic" was used by Thompson.
The complaint alleges Thompson direct-messaged another Twitter user about the stolen information, saying she has "basically strapped [herself] with a bomb vest."
![The complaint alleges Thompson direct-messaged another Twitter user about the stolen information, saying she has "basically strapped [herself] with a bomb vest."](https://staticbiassets.in/thumb/msid-70449412,width-700,height-525,imgsize-148986/the-complaint-alleges-thompson-direct-messaged-another-twitter-user-about-the-stolen-information-saying-she-has-basically-strapped-herself-with-a-bomb-vest-.jpg)
On Twitter, Thompson allegedly exchanged direct messages with an unidentified individual about the data breach on June 18, the complaint states.
The screenshot of the messages showed that Thompson wanted to "distribute" the "buckets" of information that she obtained. According to the complaint, Martini wrote that the suspect "intended to disseminate data stolen from victim entities, starting with Capital One."
The complaint claims Thompson also acknowledged the information at her disposal in a subsequent message, saying that the information "buckets" include Social Security numbers with full names and dates of birth of the compromised Capital One accounts.
Popular Right Now
Advertisement