"In this case the reportedly ex-AWS employee gaining unauthorized access to Capital One's systems can be considered a hack, while the theft and public distribution of data constitutes a breach," explained Matt Walmsley, EMEA director at AI-focused cyber firm Vectra.