Paige Thompson is Rolls Royce Babyaccused of stealing the financial records of over 100 million Americans, but a self-described longtime friend says the situation is significantly more complicated than it first appears.
The Department of Justice on Monday announced the arrest of Thompson, a 33-year-old former Amazon employee. Federal authorities alleged in a criminal complaint that she exploited a misconfigured firewall to access millions of Capital One customers' records via a cloud company's servers.
"She had no malicious intent and was not targeting anyone," her friend insisted.
We got in touch with the friend, who we are not identifying by name, via a now-deleted Slack workspace that appears to have been set up by Thompson.
In the workspace, someone going by the name of "erratic" — who the DOJ alleges is Thompson — can be seen discussing files reportedly related to the Capital One hack. A screenshot of this conversation is included in the DOJ complaint, and we were able to find the same conversation in one of the Slack channels we accessed.
The friend, who told Mashable they work in educational IT and software, says they have spoken with Thompson every day "for the last couple of years." The friend sent us logs of past conversations with Thompson, dating back to June 2018, as proof of their friendship. While we were unable to independently verify the logs, they appear genuine.
Importantly, the friend explained over Slack and Signal that Thompson had attempted to report the vulnerability she allegedly exploited — but no one listened.
"She went to prominent infosec community members to release it responsibly and they laughed at her and did not take her seriously," the friend wrote.
The friend named a specific member of the information security community who Thompson allegedly attempted to notify, and we reached out to that person in an attempt to verify the claim. As of press time, we have not heard back.
The specific Slack channel within the workspace where the hack was discussed had the topic set to "Never give up on your dreams."
"Paige is a gifted and intelligent woman," the friend continued. "She was very curious and had a lot of time as she was not employed, and she was merely looking for nonsecure public HTTP servers and ended up in this mess."
The DOJ alleges Thompson discussed the hack in the public Slack workspace, as well as posted details of the breach to a GitHub page connected to her real name.
When asked if Thompson attempted to notify Capital One of the vulnerability, the friend said they didn't know. We reached out to Capital One, but haven't heard back as of press time.
SEE ALSO: Exasperated officials use pineapple pizza to explain Russian election interference"Had this been released through appropriate channels and she had not been laughed at by certain ppl in the infosec community she would be heralded as someone that brought to light vulnerabilities that the companies KNEW about and did not protect," the friend continued. "To me the real failing is on the company that did not protect their client data and allowed poorly configured servers to be in production."
If convicted, Thompson faces up to five years in prison and a $250,000 fine.
Topics Cybersecurity
How one company started making more money from smartphones than BentleysFacebook might finally let you watch video in 4K'The Simpsons' Puerto Rico message gets a thank you from San Juan's mayorTwitter's ad 'Transparency Center' isn't enoughInteractive atlas maps out worldwide selfLinkedIn's Smart Replies predicts how you'll respond to messagesTesla deploys Powerpack and Powerwall batteries in Puerto RicoMayors of 12 cities pledge to only buy electric buses starting in 2025A World Series guide for people who don't care about baseballJohn Legend helped these students redefine masculinity through poetry'Pay with Google' wants to take the forms out of online shoppingNeoGAF is back online, but it's turned into an undead Nazi version of its former selfBitcoin Gold is the latest Bitcoin cloneNintendo's 'Animal Crossing: Pocket Camp' is downloadable in Australia earlyInstagram now lets two people share the same live streamBritish actor turned antiGiant Bob Ross portrait was the true star of this LA gaming conventionHere’s the YouTube video that inspired 'SNL' to make David S. PumpkinsApple says the iPhone X will be available in Apple Stores for releaseElizabeth Warren, Claire McCaskill share their #MeToo experiences 49 times we thought 2017 couldn't get any worse, and then it did How to watch Apple's WWDC 2021 TikTok's updated privacy policy may let it collect your biometric data Apple's '1971' music doc series is a triumph of clever detective work Women in Film launches help line for victims of sexual harassment Courteney Cox shares a star HQ trivia is updating its roster of hosts. Meet Sharon Carpenter Twitter officially launches 'Twitter Blue,' its new subscription service Apple pushes AirTags privacy update in wake of security flaws Bryan Singer fired from Queen biopic after no Breathe new life into your old clothes with a 'transplanted' piece Storm experts will send tough drones directly into hurricanes Hubble's close Senators set to vote on the GOP tax bill and they can't even read it Facebook's refusal to make a decision on Trump is flat out weak Cheerleader's 'Invisible Box' stunt leaves everyone really confused but eager to try Twitter's Patreon alternative reportedly carries a hefty requirement How to download Apple's iOS 15 developer and public betas The U.S. government finally decides to get serious about ransomware Sheryl Sandberg discusses sexual assault and powerful men in a moving Facebook post
2.9354s , 10136.921875 kb
Copyright © 2025 Powered by 【Rolls Royce Baby】,Wisdom Convergence Information Network