At least two states are investigating the theft of 83 million customer records from JPMorgan Chase in a massive cyberattack uncovered over the summer. Illinois Attorney General Lisa Madigan said she has launched a probe into the hack on the No. 1 U.S. bank by assets. Connecticut is also investigating, said a person familiar with the matter. "A breach of this size and significance demands a comprehensive response from the highest level of our government," Madigan said in a statement. "Thorough investigations of major breaches must be done, and the results must be shared with the public whose information and financial security is at risk, or consumer confidence will be further diminished." Other states' attorneys general are discussing the matter and could launch a joint investigation.
News of the actions by the states emerged a day after the bank said in a regulatory filing that customer names, addresses, phone numbers and email addresses of 76 million households and 7 million small businesses may have been exposed in the attack. The bank said it has not seen any rise in fraud in the wake of the discoveries, but security researchers said the information that hackers stole, such as addresses, tends to change relatively slowly, which gives criminals a long time to use it.
- JPMorgan Chase Says 76 Million Households Affected by Data Breach
- UPS Says Hack May Have Exposed Customer Data at 51 Stores
- Cyber Spy High: Meet the NSA's Hacker Recruiter
— Reuters and NBC News staff