Summary
JPMorgan Chase & Co. (JPM) filed an 8-K on October 2, 2014, to provide an update on a previously disclosed cyberattack. The company disclosed that user contact information, including names, addresses, phone numbers, and email addresses, along with internal JPMorgan Chase information, was compromised for approximately 76 million households and 7 million small businesses. Importantly, the filing states there is no evidence that sensitive account information such as account numbers, passwords, user IDs, dates of birth, or Social Security numbers were affected. The company reassured investors and customers by noting that, as of the filing date, there was no evidence of unusual customer fraud related to this incident. JPMorgan Chase also emphasized its customer protection policy, stating that customers will not be liable for unauthorized transactions if they promptly report them. The firm is continuing to monitor the situation, investigate, and cooperate with government agencies.
Key Highlights
- 1JPMorgan Chase disclosed a cyberattack impacting user contact information and internal firm data.
- 2Approximately 76 million households and 7 million small businesses were affected by the contact information breach.
- 3Crucially, no evidence suggests compromise of sensitive account details like account numbers, passwords, or SSNs.
- 4The company reported no unusual customer fraud linked to the incident as of October 2, 2014.
- 5JPMorgan Chase reiterated its policy of customer non-liability for unauthorized transactions reported promptly.
- 6The firm is actively monitoring the situation, continuing its investigation, and cooperating with government agencies.