2014 contact information breach
Data compromised
Email addresses, Passwords, Names, Addresses, Phone numbers, Account numbers, Credentials, Employee data, Internal documents
Technical writeup
Attackers gained access to JPMorgan's network and exfiltrated contact information (names, emails, addresses, phone numbers) for roughly 83 million households and 7 million small businesses. No account numbers or passwords were taken.
Root cause
Compromised employee credentials and insufficient two-factor authentication on internal systems.