2014 JPMorgan Chase data breach

From Wikipedia, the free encyclopedia
2014 JP Morgan Data Breach
Time2011 – May 2015
Durationc. 3 Years 6 Months
LocationNew York City
TypeData breach

The 2014 JPMorgan Chase data breach was a cyberattack against American bank JPMorgan Chase that is believed to have compromised data associated with over 83 million accounts—76 million households (approximately two out of three households in the country) and 7 million small businesses.[1] The data breach is considered one of the most serious intrusions into an American corporation's information system and one of the largest data breaches in history.[2][3][4]

The cyberattack[edit]

The attack—disclosed in September 2014—was discovered by the bank's security team in late July 2014, but not completely halted until the middle of August.[3][5] The bank declared that login information associated with the accounts (such as social security numbers or passwords) was not compromised but names, email and postal addresses, and phone numbers of account holders were obtained by hackers, raising concerns of potential phishing attacks.[4][6]

The attack targeted nine other major financial institutions alongside JPMorgan Chase.[3][7] As of October 9, the only other company believed to have had data stolen is Fidelity Investments[8] but investigators reported that the attack attempted to infiltrate the networks of banks and financial companies such as Citigroup, HSBC Holdings, E*Trade, Regions Financial Corporation and payroll-service firm Automatic Data Processing (ADP).[9]

Indictments and extradition[edit]

US federal indictments were issued against four hackers in the massive fraud in November 2015.[10] Two Israelis indicted, Gery Shalon and Ziv Orenstein, were arrested in Israel and will be extradited to the U.S. according to Israel's Justice Ministry.[11] American hacker Joshua Samuel Aaron had also been part of the indictments.[12]


  1. ^ Siegel Bernard, Tara (3 October 2014). "Ways to Protect Yourself After the JPMorgan Hacking". The New York Times. Retrieved 5 October 2014.
  2. ^ "JPMorgan hack exposed data of 83 million, among biggest breaches in history". Reuters. 2 October 2014. Retrieved 5 October 2014.
  3. ^ a b c Goldstein, Matthew; Perlroth, Nicole; Sanger, David E. (2014-10-03). "Hackers' Attack Cracked 10 Financial Firms in Major Assault". The New York Times. Retrieved 2014-10-04.
  4. ^ a b Rushe, Dominic (2 October 2014). "JP Morgan Chase reveals massive data breach affecting 76m households". The Guardian. Retrieved 5 October 2014.
  5. ^ Chan, Cathy (2014-10-02). "Hackers' Attack on JPMorgan Chase Affects Millions". The New York Times. Retrieved 2014-10-02.
  6. ^ Santus, Rex (3 October 2014). "What You Need to Know About the JPMorgan Chase Cyberattack". Mashable. Retrieved 5 October 2014.
  7. ^ Woodyard, Chris (4 October 2014). "Report: Russian hackers behind JPMorgan Chase attack". USA Today. Retrieved 5 October 2014.
  8. ^ Barrett, Devlin (9 October 2014). "J.P. Morgan Hackers Also Stole Fidelity Data, Investigators Think". The Wall Street Journal. Retrieved 9 October 2014.
  9. ^ Riley, Michael (9 October 2014). "JPMorgan Hackers Said to Probe 13 Financial Firms". Bloomberg. Retrieved 10 October 2014.
  10. ^ Zetter, Kim (10 November 2015). "Four Indicted in Massive JP Morgan Chase Hack". WIRED.
  11. ^ "2 Israelis in JPMorgan Chase cyber fraud case to be extradited". Jewish Telegraphic Agency. 9 May 2016. Retrieved 23 March 2023.
  12. ^ "Suspected JP Morgan hacker arrested after returning from Moscow". CBS News. 14 December 2016. Retrieved 23 March 2023.

External links[edit]