PhysicalTheftCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
JPMorgan Chase Bank, National Association
bd_3cf8d0ee938cfeb2 · schema v1 · pii pii-v1
Full breach record for JPMorgan Chase Bank, National Association →JPMorgan Chase Bank, N.A. notified Massachusetts residents that a package containing checks and transaction paperwork went missing in transit from a New York branch to a processing facility. The package, sent on or around March 25, 2026, may have included names, addresses, and account numbers. The bank is working with the courier to locate the package and has opened a claim. No indication exists that information was used inappropriately.
Massachusetts clock⏱ MA AG >30d5 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_11d6effbd2fe355fMassachusetts State AGfiled 2026-05-01Candidate
- bd_dbf47c9200986836Massachusetts State AGfiled 2026-06-01(31d gap)Candidate
- bd_6a1ee0f106d53403Indiana State AGfiled 2026-06-02(32d gap)Verified
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-837-jpmorgan-chase-bank-na/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 1, 2026
- Raw hash
- afd6b833527e87b5f923f556d39d141a6c4506d07134a5c3ac70ef04fc7f06d8
Reporting entity
- Name
- JPMorgan Chase Bank, National Associationnorm: jpmorgan chase bank national
Victim entity
- Name
- JPMorgan Chase Bank, National Associationnorm: jpmorgan chase bank national
Incident
- Discovered
- Mar 25, 2026
- Materiality determined
- —
- Notification sent
- May 21, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
Compliance
- Time to disclose
- 5 weeks(37 days from discovery to filing)
- Compliance flags
- MA AG >30d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.