Capital One Hit by Data Breach
While this is a setback for Capital One, investors should view it as an opportunity to purchase the shares at a discount.
While this is a setback for Capital One, investors should view it as an opportunity to purchase the shares at a discount.
Capital One Financial (COF) disclosed that it was hit by a data breach affecting 100 million customers, which the company estimates will result in $100 million-$150 million in charges. The hack was committed by a former Amazon Web Services employee who was able to access data taken from credit card applications. It appears the perpetrator was able to obtain security credentials of an existing account. In our research, we have praised Capital One’s migration to AWS, which we have said is significantly more secure than on-premises facilities. We still believe this to be true, but AWS isn’t invulnerable to every security breach, as this case clearly demonstrates. Furthermore, based on the suspect’s Twitter activity and Slack posts, as detailed by security expert Brian Krebs, it appears Capital One isn’t the only company affected by this--it’s just the first company to publicly acknowledge it has been hacked and the most proactive in addressing the security situation. Though we’ll make near-term changes to our model to reflect the $100 million-$150 million in charges the company plans to take, we do not anticipate any material changes to our $133 fair value estimate.
While this is a setback for Capital One, investors should view it as an opportunity to purchase the shares at more than a 30% discount to our fair value estimate. We still support the company’s move to AWS and are impressed by how a company of Capital One’s size has been able to disentangle itself from expensive legacy technology. The company is the first large financial institution to attempt to migrate its core operations to the cloud, and it should be expected there would be obstacles. Once its cloud migration is complete, Capital One’s technology stack will be much leaner than rivals and enables accelerated prototyping and testing of new applications that currently is extremely difficult using on-premises servers, which is partly why we view Capital One so favorably.
Morningstar Premium Members gain exclusive access to our full analyst reports, including fair value estimates, bull and bear breakdowns, and risk analyses. Not a Premium Member? Get this and other reports immediately when you try Morningstar Premium free for 14 days. |
Colin Plunkett does not own (actual or beneficial) shares in any of the securities mentioned above. Find out about Morningstar’s editorial policies.
Transparency is how we protect the integrity of our work and keep empowering investors to achieve their goals and dreams. And we have unwavering standards for how we keep that integrity intact, from our research and data to our policies on content and your personal data.
We’d like to share more about how we work and what drives our day-to-day business.
We sell different types of products and services to both investment professionals and individual investors. These products and services are usually sold through license agreements or subscriptions. Our investment management business generates asset-based fees, which are calculated as a percentage of assets under management. We also sell both admissions and sponsorship packages for our investment conferences and advertising on our websites and newsletters.
How we use your information depends on the product and service that you use and your relationship with us. We may use it to:
To learn more about how we handle and protect your data, visit our privacy center.
Maintaining independence and editorial freedom is essential to our mission of empowering investor success. We provide a platform for our authors to report on investments fairly, accurately, and from the investor’s point of view. We also respect individual opinions––they represent the unvarnished thinking of our people and exacting analysis of our research processes. Our authors can publish views that we may or may not agree with, but they show their work, distinguish facts from opinions, and make sure their analysis is clear and in no way misleading or deceptive.
To further protect the integrity of our editorial content, we keep a strict separation between our sales teams and authors to remove any pressure or influence on our analyses and research.
Read our editorial policy to learn more about our process.