JPMORGAN CHASE & CO

JP Morgan Chase Bank, N.A. reported a data breach to the Indiana Attorney General. The breach occurred on 2026-04-28 and was reported on 2026-06-02. 2 Indiana residents were affected.

JPMorgan Chase Bank, N.A. notified Massachusetts residents that counter checks for checking accounts ending in XXXX were mistakenly issued to another customer. The incident involved the disclosure of names, addresses, and account numbers. The bank reimbursed affected accounts and closed them to prevent further misuse. The notification, dated July 2, 2026, provides instructions for placing security freezes and fraud alerts.

JPMorgan Chase Bank, N.A. notified Massachusetts residents that a package containing checks and transaction paperwork (including names, addresses, and account numbers) went missing from a courier between a Foster City, CA branch and a processing facility. The incident occurred around March 10, 2026. The bank is working with the courier to locate the package and has opened a claim. No indication of inappropriate use was found. Affected individuals were advised to place fraud alerts or security freezes on their credit files.

JPMorgan Chase Bank, N.A. notified Massachusetts residents that a package containing checks and transaction paperwork went missing in transit from a New York branch to a processing facility. The package, sent on or around March 25, 2026, may have included names, addresses, and account numbers. The bank is working with the courier to locate the package and has opened a claim. No indication exists that information was used inappropriately.

JPMorgan Chase Bank, N.A. disclosed a software issue causing unauthorized access to plan participant data. Between August 26, 2021, and February 23, 2024, three authorized users accessed reports containing names, addresses, SSNs, and bank account details. The issue was discovered on February 26, 2024, and promptly addressed with a software update. Affected individuals are offered two years of credit monitoring.

J.P. Morgan Chase Bank, N.A. disclosed a data breach affecting plan participants of {{PlanClientName}}. Between August 26, 2021, and February 23, 2024, three authorized system users accessed reports containing names, addresses, SSNs, and bank account numbers. The incident was discovered on February 26, 2024, and remediated via a software update. Affected individuals were offered two years of credit monitoring.

JPMorgan Chase Bank, N.A. notified affected customers of a technical issue that may have mistakenly allowed another customer with similar personal information to view account information—including balances, transactions, name, and account numbers—on chase.com or in the Chase Mobile app, or receive account statements. The breach date listed is May 24, 2021. No indication of inappropriate use was found. One year of free credit monitoring via Experian IdentityWorks was offered.

JPMorgan Chase Bank, N.A. reported a data breach involving a call center employee who allowed an unauthorized third party to overhear customer calls and view screens between April and November 2020. Disclosed information included names, addresses, account numbers, Social Security numbers, and email addresses. The employee was terminated, and the bank offered two years of free credit monitoring via Experian IdentityWorks.

A Chase employee improperly downloaded customer information, including names, addresses, mortgage loan numbers, and Social Security numbers, to a personal computer and two online data storage sites on or around June 28, 2018. The data remained accessible to third parties for approximately three weeks. The employee was authorized to access the data but violated policy by using unapproved devices and sites. Chase deleted the data from the unauthorized locations and offered two years of free credit monitoring.

J.P. Morgan Chase Bank, N.A. reported a data breach to the Hawaii Office of Consumer Protection. The office was notified on 2013/12.09. Breach type: Hackers/Unauthorized Access. 3,903 Hawaii residents were affected. Recovered from the Internet Archive after the notice was removed from the OCP table.