The breach affected 100 million people in the United States and 6 million in Canada. The data had been encrypted, but the attacker was able to decrypt it. Paige A. Thompson, 33, also known online as “erratic,” has been arrested for the breach. Security expert: “Hopefully for Capital One, the different controls put in place, including bounty programs and tokenizing sensitive data, will prevent this breach from becoming ‘Equifax 2. “Fortunately, Capital One used tokenization to protect social security numbers and account numbers,” he said.”]