JPM NYSE Security breach

JPMorgan Chase

JPMorgan Chase disclosed that a cyberattack compromised contact information associated with 76 million households and 7 million businesses.

1 month vs SPY -1.0 pp Below SPY

+2.8% JPM vs +3.7% SPY

DisclosureOct 2, 2014, 4:49 PM EDT
Company’s roleDirect victim
Available data12 months complete
Share typeCommon stock · JPM

This site shows how share prices moved after an incident became public. It does not prove that the incident caused the move. Company news, sector moves and the wider market can affect every result. Educational only — not investment advice.

Disclosure timing

When could the market react?

The baseline is the last adjusted close before the news was public. The reaction session is the first close afterward.

  1. 01Baseline sessionOct 2, 2014

    Normalized to 100 for both JPM and SPY.

  2. 02Public disclosureOct 2, 2014, 4:49 PM EDT

    Documented publication time.

  3. 03First reaction closeOct 3, 2014

    +2.5% company total return versus +1.1% for SPY; +1.4 pp market-relative return.

Time windows

Company vs SPY

Each row uses the last trading session on or before its target date. “Market-relative” is the company return minus the SPY return, in percentage points.

Returns measured from the shared baseline session
WindowEndpointJPMSPYMarket-relativeSignal
First reaction Oct 3, 2014 +2.5% +1.1% +1.4 pp Above SPY
+7 days Oct 9, 2014 +0.4% -0.8% +1.3 pp Above SPY
+1 month Oct 31, 2014 +2.8% +3.7% -1.0 pp Below SPY
+3 months Jan 2, 2015 +6.9% +6.3% +0.6 pp Above SPY
+6 months Apr 2, 2015 +4.2% +7.3% -3.1 pp Below SPY
+12 months Oct 2, 2015 +6.1% +2.3% +3.8 pp Above SPY
Compare with current catalog aggregates
WindowThis caseCatalog medianCatalog meann
First reaction+1.4 pp-0.8 pp-1.5 pp30
+7 days+1.3 pp-2.0 pp-4.0 pp30
+1 month-1.0 pp-6.6 pp-6.8 pp30
+3 months+0.6 pp-5.1 pp-6.6 pp30
+6 months-3.1 pp-5.6 pp-7.5 pp30
+12 months+3.8 pp-3.7 pp-10.1 pp30

Normalized total return

JPM compared with SPY

Baseline session = 100. Adjusted close reflects splits and reinvested distributions.

JPMorgan Chase had +6.1% company total return versus +2.3% for SPY; +3.8 pp market-relative return. The chart shows normalized adjusted-close performance for up to 24 months.

View tabular chart fallback
Representative normalized chart points, sampled approximately monthly
DateJPMSPY
Oct 2, 2014100.0100.0
Oct 31, 2014102.8103.7
Dec 2, 2014103.8106.5
Jan 2, 2015106.9106.3
Feb 3, 201597.0106.0
Mar 5, 2015106.0108.9
Apr 6, 2015104.1108.0
May 5, 2015110.9108.5
Jun 4, 2015114.2109.2
Jul 6, 2015116.7107.9
Aug 4, 2015118.6109.3
Sep 2, 2015108.4102.0
Oct 2, 2015106.1102.3
Nov 2, 2015114.4110.4
Dec 2, 2015116.4109.4
Jan 4, 2016111.8106.1
Feb 3, 2016100.9101.0
Mar 4, 2016105.5105.8
Apr 5, 2016103.3108.4
May 4, 2016109.0108.8
Jun 3, 2016114.4111.6
Jul 5, 2016106.2111.2
Aug 3, 2016115.4115.3
Sep 1, 2016119.9116.0
Sep 30, 2016118.8116.0

Price recovery

No initial drop

Here, recovery only means that adjusted close reached the baseline again. It does not mean every effect of the incident ended.

State
No initial drop
Initial trough
+0.4% on Oct 9, 2014
Recovery close
Not applicable / not observed
Calendar days
Observation cap
24 months after disclosure

Hypothetical $1,000

What would $1,000 have looked like?

Compare $1,000 in JPM with $1,000 in SPY, bought and measured on the same dates.

JPM value $1,018 JPMorgan Chase
SPY value $1,069 US market benchmark
Difference vs SPY -$51 Observed result

Entry Oct 6, 2014 Exit Apr 6, 2015

Uses fractional shares and adjusted close. Leaves out taxes, fees and slippage. The holding period starts on the purchase date. This is a historical illustration, not an investment strategy.

Case note

JPMorgan Chase told customers and investors that contact information and internal information relating to approximately 76 million households and 7 million small businesses had been compromised. It said it had not found evidence that core account credentials or Social Security numbers were exposed.

The SEC accepted the filing at 4:49 p.m. EDT, after the regular session. The October 2 close therefore remains the baseline and October 3 is the first reaction session. The observation does not attribute later returns solely to the incident.

Evidence

Sources and case review

We qualify each case before checking its price results. These links support the disclosure date, listing, incident and business impact.

  1. primary Oct 2, 2014
    JPMorgan Chase October 2, 2014 Form 8-K filing detail JPMorgan Chase / U.S. SEC Supports: Disclosure, Timing, Listing, Impact, Description
  2. Listing evidenceChecked Jul 20, 2026
    JPMorgan Chase October 2, 2014 Form 8-K U.S. Securities and Exchange Commission The event-period filing detail identifies the issuer and records SEC acceptance at 4:49 p.m. EDT.

Why it is included. The issuer directly suffered the attack and filed a market disclosure quantifying a very large household and small-business population, meeting the systemic-reach threshold. Reviewed Jul 20, 2026.