Capital One cracker could be sent back to prison after judges rule she got off too lightly

This article reports on Paige Thompson—the perpetrator of the Capital One breach who accessed poorly configured AWS S3 buckets to exfiltrate data from over 100 million credit card applicants and deploy cryptomining—who was convicted in 2022; an appellate court has ruled her original sentence (time served plus probation) was too lenient and ordered a new sentencing hearing. The piece outlines the scale of damage, subsequent fines and lawsuits against Capital One, continued post-arrest activity by Thompson, and the split appellate decision regarding consideration of her personal vulnerabilities during sentencing.