HackingFinancial ServicesFinanceStolen CredentialsData ExfiltratedCredentialsIdentity (basic)LowContained

J.P. Morgan Corporate Challenge

bd_5e4576354fec8c8b · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Sep 5, 2014

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for J.P. Morgan Corporate Challenge →

J.P. Morgan Corporate Challenge disclosed a cybersecurity incident on August 14, 2024, affecting the J.P. Morgan Corporate Challenge website. The company identified suspicious server activity involving login information, resulting in the unauthorized access of customer site passwords and contact information (name, address, email). No banking or financial information was compromised. The company took steps to secure the database and notified affected individuals, advising them to change passwords.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Sep 5, 2014

Filed

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: J.P. Morgan Corporate Challenge
norm: jp morgan corporate challenge

Name: J.P. Morgan Corporate Challenge
norm: jp morgan corporate challenge
Industry: Financial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Aug 14, 2024
Affected individuals: Not disclosed
Data types: CredentialsIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Taken steps to prevent unauthorized access to the site’s database
Changes made: Encourage customers to avoid using the same password at multiple sites
Encourage customers to change all their passwords regularly
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-46496
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 5, 2014
Raw hash: 637acfa797d6b08beaf32e9a5bccdfa741c6ddb77a12f9543977e1f30d8a06f5

Reporting entityJ.P. Morgan Corporate Challenge

Victim entityJ.P. Morgan Corporate Challenge

IncidentUnauthorized Access

Stated responseTaken steps to prevent unauthorized access to the site’s database

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov