The SEC filing states[1]: User contact information – name, address, phone number and email address – and internal JPMorgan Chase information relating to

The SEC filing states[1]: User contact information – name, address, phone number and email address – and internal JPMorgan Chase information relating to such users have been compromised. I have multiple personal and business accounts at Chase, and they collect a shitload of other "internal information", way beyond name, address, phone and email. Ostensibly for KYC [2] they try to collect personal information about the other members of my company, non-public information about my company's revenues and customers, my work and professional history, business plans and projections, my kids' college plans, real estate holdings, interests in other businesses, etc., etc., etc. They're very pushy about gathering this information, claiming it's for regulatory compliance. I'm sure it's mostly for their own attempts to hawk their lame financial products. So that category of "information relating to such users" could be ginormous. [1] http://investor.shareholder.com/jpmorganchase/secfiling.cfm?filingID=1193125-14-362173 http://investor.shareholder.com/jpmorganchase/secfiling.cfm?... [2] http://en.wikipedia.org/wiki/Know_your_customer http://en.wikipedia.org/wiki/Know_your_customer