Was the Capital One breach not a result of gross internal malpractice on the part of Amazon? That allowed an Amazon employee to gain priviledged access to CC data in Capital One's environment.
There are multiple analysis of that breach available. Pick one.
Here’s a starter.