Welcome Guest. | Log In| Register | Membership Benefits
  • Email this page E-mail this page
  • |  Print Print this page
  • |   Bookmark and Share

Congressmen Inquire About JPMorgan Chase Breach

Lawmakers say they want to know about personal data contained in missing computer tape

Oct 09, 2009 | 03:31 PM

By Tim Wilson
DarkReading

Two members of Congress are asking questions about a computer tape containing personal data that JPMorgan Chase Bank lost earlier this year.

According to a Reuters report, Rep. Joe Barton -- the top Republican on the House Energy and Commerce Committee -- and George Radanovich -- the top Republican on the subcommittee on commerce, trade and consumer protection -- wrote JPMorgan Chase Bank CEO James Dimon on Wednesday.

The congressmen want to know how many customers were affected and how many were notified, the letter says.

"Breaches like this are of concern because of the variety of malicious crimes that can be perpetrated using stolen personal information," wrote Barton and Radanovich, who asked for a response to their questions by Oct. 31.

The bank, which declined Reuters' request on Thursday to say exactly when or where the incident occurred or how many customers were involved, did say it sent letters offering their customers "identity protection" for one year free of charge.

The letters reportedly notified customers that their Social Security numbers and addresses might have been on the missing backup computer tape, but that it contained no banking or financial information, a Chase spokesman said on Thursday.

The letters were sent out in August, according to the spokesman, who said the bank has received no indication that the information has been misused.

"You need special software to read the data," said bank spokesman Thomas Kelly, who declined to say how many people's information were on the tape.

Have a comment on this story? Please click "Discuss" below. If you'd like to contact Dark Reading's editors directly, send us a message.


Subscribe to RSS










Bugs
ENTERPRISE VULNERABILITIES
Vulnerability:suse linux
Published:2010-01-22
Severity:High
Description:SUSE Linux Enterprise 10 SP3 (SLE10-SP3) configures postfix to listen on all network interfaces, which might allow remote attackers to bypass intended access restrictions.
Vulnerability:ie
Published:2010-01-22
Severity:High
Description:The URL validation functionality in Microsoft Internet Explorer 7 and 8 does not properly process input parameters, which allows remote attackers to execute arbitrary local programs via a crafted URL, aka "URL Validation Vulnerability."
Vulnerability:bind
Published:2010-01-22
Severity:Medium
Description:ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC (1) NSEC and (2) NSEC3 records, which allows remote attackers to add the Authenticated Data (AD) flag to a forged NXDOMAIN response for an existing domain.
Vulnerability:ie
Published:2010-01-22
Severity:High
Description:Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-2530 and CVE-2009-2531.
Vulnerability:ie
Published:2010-01-22
Severity:High
Description:Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-3671, CVE-2009-3674, and CVE-2010-0246.


Briefing Centers
POWERFUL INFORMATION
AT YOUR FINGERTIPS
(SPONSORED LINKS)