I assume they're misunderstanding/misrepresenting the CapitalOne breach.