J.P. Morgan
bd_17c628b4b6b443e3 · schema v1 · pii pii-v1
J.P. Morgan disclosed a software issue causing unauthorized access to plan participant data by three authorized system users from August 26, 2021, to February 23, 2024. The incident, discovered on February 26, 2024, exposed names, addresses, Social Security numbers, and bank account details. J.P. Morgan applied a software update to fix the issue and offered two years of credit monitoring to affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
Aug 26, 2021
Begins
Feb 26, 2024
Discovered
Apr 27, 2024
Filed
vs. sector median
on median
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- Oregon State AGbd_5db5795a826bccef2024-04-28 · +1dVerified
- Montana State AGbd_d35e9bad8d06eb142024-05-06 · +9dVerified
- Vermont State AGbd_2c75438adc27bcc82024-04-18 · +9dVerified
- Delaware State AGbd_7f9042b5f1648a922024-04-18 · +9dVerified
Filing propagation · 5 filings · 5 states
View merged incident ↗Pattern: first filing Apr 18 (VT), last May 6 (MT) — a 18-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.