JPMorgan says some customers’ email breached

NEW YORK (Reuters) – Email addresses of some JPMorgan Chase & Co customers were exposed as part of a data breach at a marketing vendor it uses, the bank said.

Epsilon, a unit of Alliance Data Systems Corp, said on Thursday that a person outside of the company hacked into some of its clients’ customer files.

JPMorgan Chase, which uses Epsilon to send marketing emails, said some of its customers’ e-mail addresses were part of the data breach.

Epsilon told the bank that the accessed files did not include any customers’ financial information, but JPMorgan Chase is “actively investigating to confirm this,” the bank said in a statement.

The vendor said separately that “a full investigation is under way.” The data breach exposed only customer names and e-mail addresses, and Epsilon said that “no other personal identifiable information associated with those names was at risk.”

Spokeswoman Jessica Simon declined to identify which other Epsilon clients were affected by the data breach. The vendor is “cooperating with a number of authorities now, so I don’t know how long it (the investigation) will take,” she said.

(Reporting by Brenton Cordeiro in Bangalore and Maria Aspan in New York; Editing by Joyjeet Das; Editing by Gary Hill)

JPMorgan says some customers’ email breached