Chase Important Update on Cyber Security We want to update you further on the cyber attack against our company. After extensive review, here is what our forensic investigation has found to date: Heres what you should know now: There is no evidence that your account numbers, passwords, user IDs, date of birth or Social Security number were compromised during this attack. However, your contact information – name, address, phone number and email address – was compromised. Your money at JPMorgan Chase is safe: Unlike recent attacks on retailers, we have seen no unusual fraud activity related to this incident. Importantly, you are not liable for any unauthorized transaction on your account that you promptly alert us to. We are very sorry that this happened and for any uncertainty this may cause you. We dont believe that you need to change your password or account information. Scroll down for answers to questions you might have. As always, we recommend you use care with your accounts and information, as we describe in our Security Center. Were here to help Attacks like these are frustrating. There are always lessons to be learned, and we will learn from this one and use that knowledge to make our defenses even stronger. Here are answers to some questions you may have based on our investigation to date. Is my money at JPMorgan Chase safe? Yes. There is no evidence that financial data such as account numbers, passwords, user IDs, dates of birth or Social Security numbers were accessed, acquired or compromised As always, you are not liable for any unauthorized transaction on your account that you promptly alert us to. We have not seen any unusual fraud activity related to this incident. Should I change my password? We dont believe thats necessary. Passwords and user IDs were not compromised. Do I need a new debit or credit card? No credit card or debit card numbers were compromised. Since we have seen no evidence of unusual fraud activity, we dont think customers need to go through the inconvenience of having their cards reissued. Was I affected? You were affected if you used the following web or mobile services: Chase, JPMorganOnline, Chase Mobile or JPMorgan Mobile. So what information did they compromise? User contact information – specifically name, address, phone number and email address. They also compromised internal Chase data used in connection with providing or offering services, such as the Chase line of business the user is affiliated with. Do I need to get credit/identity theft monitoring? We dont think thats necessary. None of your financial or account data was compromised. Have you seen fraud from this incident? We have not seen unusual fraud activity related to this. Have you stopped the attack? Yes. We have identified and closed the known access paths. We have no evidence that the attackers are still in our system. Do you have general tips about protecting my information? We provide a number of recommendations in the Security Center of Chase. What do I need to worry about? Phishing is typically the biggest risk when contact information has been compromised. We encourage you to be cautious of any communications that ask for your personal information. Dont click on links or download attachments in emails from unknown senders or other suspicious email. We will never ask you to enter your personal information in an email or text message.
Posted on: Mon, 06 Oct 2014 11:11:54 +0000