JPMorgan Chase made a regulatory filing with the Securities and Exchange Commission Thursday that revealed a major security breach that took place during the summer. This breach, which was originally thought to only affect one million customers, has effectively compromised the personal information of more than 76 million household accounts - and 7 million small business accounts. Although it was discovered in July, the actual attack lasted from mid-June to mid-August, the New York Times. Anyone using one of the online banking sites of JPMorgan Chase is at risk.
What do I know about this violation JPMorgan Chase?
During this breach, hackers were able to penetrate deep within the computer systems of JPMorgan, access the accounts of more than 90 servers. Investigations by JPMorgan Chase and the FBI led to the conclusion that the money was taken and no sensitive financial information was disclosed. This is a relief, given the amount of information held by banks is much greater than what is at risk in major data breaches we've seen at retailers like Home Depot and Target. JPMorgan Chase also inform its regulators, including the Federal Reserve, the extent of the violation.
One concern noted is proof that hackers posted a list of programs and web applications used by all JPMorgan Chase standard computers. Having this information enables them to test vulnerabilities that allow greater access in the banking system. Whereas it will take some months at least for all of these Web applications and programs to switch to new, this information is disturbing for hackers to have.
What customer information was exposed?
During the access of JPMorgan Chase systems two months of the intruder, they could access "customer names, phone numbers and email and physical addresses - and the bank did not disclose that information could be "internal customer information.". However, he assured customers via an FAQ page that there is no evidence that user IDs, passwords, account numbers, social security numbers or birthdates were exposed.
What can I do to protect myself?
If you hold an account at JPMorgan Chase, you're probably worried about your privacy and security. Even if your most sensitive information is not exposed, a good amount of personal information is at risk. There are several steps you can take to stay ahead of all the criminals who might be looking to use your information for damage.
1. Beware of strange phone calls and emails. Since the e-mail phone numbers and addresses were exposed during this attack, there is a change you can receive calls and bogus emails. Be vigilant and remember not to give personal information by email or phone. If you receive a phone call from someone claiming to be from Chase, ask them as many questions as you can. Do not answer questions or requests they have - instead, hang up and call your local store to verify that the call is legitimate. It's likely he will not. Make sure you get the number from the site Chase.com. Similarly, treatment of emails from JPMorgan Chase cautiously. If an email asks you connect to your account, do not click on links contained within. Instead, visit the website URL directly and connect from the secure website link.
2. Shred your mail. Whenever your address is exposed, there is a risk of thieves to use against you. It is important to shred all the messages you throw, especially the letters from financial institutions as well as pre-approved credit card offers. The thieves are not above going diving waste, so you want to make sure that there is nothing in your garbage they can use. When looking for a shredder, be sure to buy one that can cross-cut, so mail can not be reassembled.
3. Change your password. Now while it is true that account login information was not exposed during this attack, it is always a good idea to change your passwords regularly. This is especially true for important accounts like your banking online. Change your password often reduce the likelihood of your account hacked. A good rule of thumb to change your password to do so every three months. You want to be sure to choose a strong password and not reuse. I do not know how to create a password? Visit our blog on creating a password.
4. Consider a protection against identity theft. Having this service on your side can help give peace of mind and keep you updated on what's happening with your identity. Protective Services against the favorite identity theft monitor your personal information, including what has been exposed in the breach, on the black market to make sure it is not used, traded or sold. Many also monitor your credit reports and provide regular reports and scores so that you are aware of your credit activity. If your identity is compromised, they will help with the recovery process.
You can learn more about identity theft protection services and how to stay safe online and off by visiting our identity theft blog.