Though the hackers didn’t get direct account information, there’s a lot they can do with a name, phone number, address and e-mail, said Adam Kujawa, head of intelligence at Malwarebytes Labs. Because the attackers know the victims had JPMorgan Chase accounts, they could send fake personalized (using the targets name, address, etc.) e-mail that appeared to come from Chase, Kujawa said.
Read MoreSelect your language