After Goldman, JPMorgan Discloses Law Firm Data Breach

JPMorgan Chase has informed some investors about a data breach linked to an outside law firm incident, the same event that Goldman Sachs disclosed in December 2025. According to Goldman Sachs' notification to impacted investors, Fried Frank told the company that any data exposed is unlikely to be distributed or used improperly.

JPMorgan’s Maine Attorney General submission reveals that 659 individuals are affected by the breach, which involved an unauthorized third party copying files from a Fried Frank shared network drive. The compromised information includes names, contact information, account numbers, SSNs, and government ID numbers such as passport numbers. Both JPMorgan and Goldman said their own systems were not compromised, while Fried Frank faces lawsuits over the breach and its security practices. It remains unclear who was behind the intrusion, and SecurityWeek has not seen a ransomware claim for this attack.