HackingStolen CredentialsDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
JP Morgan Chase & Co
bd_2c75438adc27bcc8 · schema v1 · pii pii-v1
Full breach record for JP Morgan Chase & Co →J.P. Morgan notified consumers of a data breach where three authorized system users, employed by J.P. Morgan customers or agents, accessed plan participant information between August 2021 and February 2024. The accessed data included names, addresses, SSNs, and bank account numbers. J.P. Morgan applied a software update and offered two years of credit monitoring.
Vermont clock⏱ VT AG >14 bday7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_7f9042b5f1648a92Delaware State AGfiled 2024-04-18Verified
- bd_17c628b4b6b443e3California State AGfiled 2024-04-27(9d gap)Candidate
- bd_5db5795a826bccefOregon State AGfiled 2024-04-28(10d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-04-18-jp-morgan-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 18, 2024
- Raw hash
- b7c5928c5d58cbdce5b2ba35ce9da80ed3ad3e4aee3bcb276caf9fe38cce712b
Reporting entity
- Name
- JP Morgan Chase & Conorm: jp morgan chase
Victim entity
- Name
- JP Morgan Chase & Conorm: jp morgan chase
Incident
- Discovered
- Feb 26, 2024
- Materiality determined
- —
- Notification sent
- Apr 18, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 7 weeks(52 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.