Capital One Data Breach Investigation
Chimicles Schwartz Kriner & Donaldson-Smith is investigating potential class action claims against Capital One for a data security incident that may have impacted the personal and financial information of its US card account holders.
According to a breach notification sent to affected customers on or around January 22, 2026, a cybersecurity incident compromised the security of sensitive information relating to customer credit card accounts.
What Happened at Capital One?
Capital One recently detected a data security incident that compromised the privacy of personal information associated with certain US card accounts. In a notice sent to victims, Capital One stated that an incident occurred that compromised the security of specific customer records.
While Capital One has stated they are undertaking steps to protect customer information, including working with law enforcement, the breach resulted in the exposure of highly sensitive financial data, including credit card numbers and security codes.
What Information Was Compromised?
The compromised data includes highly sensitive financial and personal identifiers. According to the notice, the following information may have been exposed:
-
Name
-
Postal address information
-
Telephone number
-
Email address
-
Date of Birth
-
Credit card numbers (including access codes if required)
-
CVV2 Codes (security codes)
-
Transaction history
-
Other financial information (expiration dates, balances, appreciation rate)
Why Is This Important?
The exposure of this sensitive information—particularly the combination of credit card numbers, CVV2 codes, and expiration dates—places affected individuals at a significantly increased risk of immediate financial fraud and identity theft. Unlike breaches that only expose contact information, the loss of CVV2 codes and full credit card numbers can allow criminals to make unauthorized purchases immediately.
What Should You Do?
If you received a notification from Capital One about this data breach and believe your personal information was compromised, please contact one of our data breach attorneys by filling out the form below to learn more about your legal rights.
(*) Indicates required field: When communicating with us through this site or otherwise in connection with a matter for which we do not already represent you, your communication may not be treated as privileged or confidential, and does not create an attorney-client relationship between you and our Firm.
