76 million chase accounts hacked

frick me..

From you link:

quote:

---

The lack of any apparent profit motive has generated speculation among law enforcement officials and security experts that the hackers were sponsored by foreign governments either in Russia or in southern Europe.

---

I knew it! Those damn Italians!!!

ETA:

quote:

---

In the filing, JPMorgan said there was no evidence that account information, including passwords or Social Security numbers, were taken.

---

WHEW!

Does this include credit cards? I have 2 CCs with chase but thankfully no bank accounts

So how are 76 million accounts compromised yet:

quote:

---

In the filing, JPMorgan said there was no evidence that account information, including passwords or Social Security numbers, were taken.

---

I'm assuming that the "state sponsored" angle of the attack just means the attackers weren't interested in the accounts.

So does this mean it's time to switch banks, or can we assume that after this breach Chase will actually have better security in place than the banks that haven't been hit and forced to improve their security yet?

quote:

---

So does this mean it's time to switch banks, or can we assume that after this breach Chase will actually have better security in place than the banks that haven't been hit and forced to improve their security yet?

---

They will most definitely take steps to improve security. The scary part, though, is that banks have pretty ridiculous requirements already. Assuming Chase has implemented everything, it makes me wonder what exactly can be done to prevent something like this.

With the technology and intelligence people have these days, I can see cyber crimes becoming as punishable as treason as the last measure of prevention. The sky is the limit for hackers otherwise.

quote:

---

By the time JPMorgan first suspected the breach in late July, hackers had already “rooted,” or gained the highest level of privilege to, more than 90 computer servers, according to several people briefed on the results of the bank’s forensics investigation who were not allowed to discuss the breach publicly. It is still not clear how hackers managed to gain deep access to the bank’s computer network.

By the time the bank’s security team discovered the breach in late July, hackers had already gained the highest level of administrative privilege to more than 90 of the bank’s computer servers, according to several people briefed on the results of the bank’s forensics investigation who were not allowed to discuss it publicly.

---

So I'm getting, from these two paragraphs, that they found out about it in july and it affected 90 servers.

I imagine PAN and other account related information is stored on a completely isolated environment from general personal information. That is the best way to do it (for security and audit purposes), and is the only way I can think of that makes those statements true.

quote:

---

Chase says (if you believe them) just contact info like addresses and phone numbers were taken, Not passwords.

---

I can believe that. Having user names and passwords stored in a separate system that the hackers weren't able to access doesn't seem unreasonable except for the fact that they're surprised it didn't happen. The state sponsored angle makes sense. If Russia/China were to drain the accounts of 20% of Americans, that's an act of war. But perhaps it was done by the KGB to show the CIA "we can breach your banks too so stop trying to shut down our botnet."

quote:

---

I have 2 CCs with chase but thankfully no bank accounts

---

I have a couple of bank accounts with them, but luckily no money in them