JPMorgan Chase Issues Data Breach Warning, Says Customers’ Bank Account Numbers and Personal Information Exposed in Third-Party Hack

JPMorgan Chase says a data breach has exposed customers’ sensitive personal and financial information.

In a filing with the Office of the Maine Attorney General, JPMorgan Chase says cybercriminals have breached a law firm that the bank works with, compromising the personal information of 659 customers.

The incident happened when a shared network drive belonging to JPMorgan Chase’s legal services provider, Fried, Frank, Harris, Shriver & Jacobson LLP, was accessed by an unauthorized third party.

Chase is now sending letters to affected customers.

“The J.P. Morgan-related files included your name and one or more of the following: account number, Social Security number, passport number and/or other government ID numbers. The files may have also included your contact information.”

According to the filing, the data breach occurred on October 23rd of 2025, but was not discovered until October 27th of 2025.

Following the breach, JPMorgan Chase is advising its customers to monitor online activity and account statements over the next one to two years, look out for potential incidents of identity theft or unauthorized transactions, and report them if found.

Chase is also offering its customers who were impacted free credit monitoring services for two years.

“This product helps detect possible misuse of your personal information and provides you with superior identity protection support focused on immediate identification and resolution of identity theft.”

Generated Image: Midjourney