company logo

Product

Our Product

We are Reshaping the way Developers find and fix vulnerabilities before they get exploited.

Solutions

By Industry

BFSI

Healthcare

Education

IT & Telecom

Government

By Role

CISO

Application Security Engineer

DevsecOps Engineer

IT Manager

Resources

Resource Library

Get actionable insight straight from our threat Intel lab to keep you informed about the ever-changing Threat landscape.

Subscribe to Our Weekly Threat Digest

Company

Contact Us

Have queries, feedback or prospects? Get in touch and we shall be with you shortly.

loading..
loading..
loading..
Loading...

Chase Bank

Dataleak

Information Disclosure

loading..
loading..
loading..

Chase Bank Customer Data got accidentally leaked to its Other Customers due to a Technical Glitch

Chase Bank accidentally leaked out its customer details, including banking information, to other Chase Bank customers due to a...

17-Aug-2021
3 min read

Chase Bank has reportedly leaked out customer data to its other customers after discovering a technical glitch on their official banking website and Chase Mobile app that made the data breach possible. Numerous banking & financial details of customers were explicitly exposed by the New York City-based JP Morgan financial firm with annual revenue of $120 billion and over 250,000 employees globally.

While the Chase Bank officials, in their officially released data breach incident notice, emphasized the technical bug that was solely responsible for the accidental data breach of its customers as given below.

"We learned of a technical issue here that may have mistakenly allowed another customer with similar personal information to see your account information on chase.com or in the Chase Mobile app or receive your account statements," Chase Bank states in the data exposure notice.

Although the claims aren't valid from an investigative perspective, besides how and under what circumstances the accessibility of breached customer data is possible by other customers was also not mentioned clearly.

Banking Credentials, Financial Details remain at the top of the affected list.

As of now, the breach was believed to have occurred between May 24th and July 14th this year, leaking personal details such as bank account statements, transaction list, beneficiary names, account numbers, and even bank balances were exposed to other Chase banking customers, including both online banking website as well as Chase Mobile app sharing similar information. But whether the affected customers were primarily targeted from a specific group in terms of credit card holders, personal or business banking customers—or everyone is still yet to be discovered as Chase Bank hasn't found any relevant evidence indicating such cases.

Impacted customers to be compensated with annual credit monitoring service for free!

Chase Bank has officially started informing the impacted customers about the accidental data exposure along with offering free credit monitoring services as a standard industry practice. In this service, the selected customers can avail free credit monitoring through a unique activation code that they will receive in the data incident notification letter.

"We are sorry for letting you down and would like to offer you one year of free credit monitoring through Experian's® IdentityWorks®," states Chase Bank officials.

Customers are also requested to stay vigilant against any "Chase Bank" phishing emails they may receive in the near future. However, there hasn't been any reported case of such data misuse incident.