Before the age of 36, Amazon transgender hackers were sentenced to 20 years' imprisonment for stealing data from more than 100million people!

【 Reading guide 】2019 year , She once invaded capital No. 1 and stole more than 1 Billion user data were arrested . Now? , The US Court ruled that Paige Thompson Guilty 7 Crimes , Or face the highest 20 Year imprisonment .

Once Amazon female Engineer , Now I'm a prisoner .

On Friday, , The United States District Court in Seattle ruled 36 Amazon employees before the age of Paige Thompson Guilty 7 Computer and Telecommunications fraud .

Thompson Or will face the highest 20 Year imprisonment ！

2019 Capital No. 1 theft

Thompson He was a software engineer at Amazon , And served until 2016 year . in the meantime , She runs an online community for other employees in her industry .

2019 year , She has downloaded more than 1 Personal information of Yiyi capital customers . This is recognized as one of the largest data leaks in the United States .

The stolen data include 1.06 Billion credit card applications , This includes the name 、 Address 、 Phone number and date of birth , as well as 140,000 A social security number 、80,000 Bank accounts , And some credit scores and transaction data .

To commit a crime ,Thompson Developed a tool , It can scan AWS To find the account with the wrong configuration , Then use these accounts to access first capital and dozens of other companies AWS The customer's system .

The previous （2019 year ） The indictment says ,Thompson Use stolen credentials to access the victim's cloud infrastructure , And download the data to the server at her Seattle residence .

in addition , She also 「 hijacked 」 The company's servers are installed with cryptocurrency mining software , Transfer any income to her personal encrypted wallet .

Thompson What has been done makes it possible , It is because the first capital has misconfigured the Amazon server .

However , These misconfigurations are common and easy to fix , So that they are not usually considered an illegal act .

at that time , First capital means as early as 2005 This weak vulnerability has been fixed since , I never expected to be taken advantage of by hackers this time .

She is transgender , Crime due to mental problems ？

2019 year 7 month , The FBI will Thompson Arrest .

and Paige Thompson The successful arrest of this man is due to his arrogance , Bragging about your abilities on social media many times , And share the so-called 「 The result of victory 」.

It is worth mentioning that , Everyone thought Thompson She is a female engineer , In fact, she is a transgender .

before ,Thompson I have admitted on the online forum that I have encountered some personal challenges in my life , And had suicidal thoughts , And some of the difficulties we have faced since becoming a woman .

2019 year , still 33 Year old Thompson But alienated the friends around me , In addition to finding a place to work with colleagues at work , Other occasions seem out of place .

She once revealed on twitter that she had made an appointment with a therapist for the dying cat , He said that being arrested would deprive him of great freedom .

She also noted that ,「 When this is over , I'm going to a mental hospital for a while .」

events 4 After a month , The first capital to replace its network security director is 2020 year 8 In June, he was fined for security loopholes and failure to ensure the security of users' financial data 8000 Thousands of dollars . 

The prosecutor also claimed that ,Thompson From at least 30 Copying and stealing data from entities using the same cloud provider , And claimed that in some cases , She used this access , The victim's cloud computing capability was used to establish a cryptocurrency mining business .

however Thompson Not guilty , After some black box operation , On 2019 year 8 He was released on pretrial bail last month .

In fact, the initial vulnerability seems to be more like a server configuration error , Instead of exploiting the vulnerability completely . This makes some people doubt Thompson Maybe a well meaning researcher .

The United States federal court said ,Thompson This year 9 month 15 I was sentenced to .

Reference material ：

https://www.nytimes.com/2022/06/17/technology/paige-thompson-capital-one-hack.html

https://www.cnbc.com/2022/06/18/former-amazon-employee-convicted-in-capital-one-hack.html

https://www.theverge.com/2022/6/18/23173727/former-amazon-employee-convicted-over-2019-capital-one-hack-paige-thompson

https://nypost.com/2022/06/18/seattle-woman-paige-thompson-convicted-in-massive-capital-one-hack/

This article is from WeChat official account. “ The new intellectual yuan ”