A top banking regulator has fined Capital One $80m over a 2019 hack that compromised the personal information of about 106 million card customers and applicants.

The Office of the Comptroller of the Currency said the bank failed “to establish effective risk assessment processes“ before transferring information-technology operations to the public cloud and “to correct the deficiencies in a timely manner.”