<?xml version="1.0" encoding="UTF-8"?>
<incident>
  <arrest type="boolean">false</arrest>
  <breach-type-id type="integer" nil="true"></breach-type-id>
  <comments-count type="integer">24</comments-count>
  <data-family-id type="integer">1</data-family-id>
  <data-recovered type="boolean">false</data-recovered>
  <disputed type="boolean">false</disputed>
  <fringe type="boolean">false</fringe>
  <fringe-description nil="true"></fringe-description>
  <id type="integer">2294</id>
  <lawsuit type="boolean">false</lawsuit>
  <records type="integer">0</records>
  <submission-id type="integer">1408</submission-id>
  <updated-at type="datetime">2009-09-11T09:45:00Z</updated-at>
  <user-id type="integer" nil="true"></user-id>
  <breach-types type="array">
    <breach_type>
      <name>Lost Tape</name>
    </breach_type>
  </breach-types>
  <data-types type="array">
    <data_type>
      <short_name>SSN</short_name>
    </data_type>
    <data_type>
      <short_name>NAA</short_name>
    </data_type>
  </data-types>
  <timeline-items type="array">
    <timeline_item>
      <first_date>2009-08-13 10:00:00 UTC</first_date>
      <type>Organization reports incident</type>
    </timeline_item>
    <timeline_item>
      <first_date>2009-08-13 09:34:00 UTC</first_date>
      <type>Organization mails notifications</type>
    </timeline_item>
  </timeline-items>
  <vector>
    <name>Inside - Accidental</name>
  </vector>
  <primary-organization>
    <business-type-id type="integer">1</business-type-id>
    <freebase-cached-data>
      <net-income type="array"/>
      <name>Chase Manhattan Bank</name>
      <companies-acquired type="array"/>
      <ticker-symbol type="array"/>
      <subsidiary-companies type="array"/>
      <market-capitalization type="array"/>
      <type>/business/company</type>
      <board-members type="array">
        <board-member>
          <title>Chairman</title>
          <from>1996</from>
          <member>Walter V. Shipley</member>
          <to>1999</to>
        </board-member>
        <board-member>
          <title>Chairman</title>
          <from>2000</from>
          <member>Douglas A. Warner III</member>
          <to>2001</to>
        </board-member>
        <board-member>
          <title nil="true"></title>
          <from>1996</from>
          <member>H Laurance Fuller</member>
          <to nil="true"></to>
        </board-member>
        <board-member>
          <title nil="true"></title>
          <from nil="true"></from>
          <member>John D. Macomber</member>
          <to nil="true"></to>
        </board-member>
      </board-members>
      <operating-income type="array"/>
      <number-of-employees type="array"/>
      <revenue type="array"/>
    </freebase-cached-data>
    <freebase-description>Chase is the consumer and commercial banking division of JPMorgan Chase. The bank was known as Chase Manhattan Bank until it merged with JPMorgan in 2000. Chase Manhattan Bank was formed by the merger of the Chase National Bank and the Bank of the Manhattan Company in 1955. The bank is headquartered in Chicago.
Chase traces its history back to the founding of The Manhattan Company by Aaron Burr on September 1, 1799 in a house at 40 Wall Street:
In addition to being fierce political and personal rivals, Aaron Burr and Alexander Hamilton competed in business, with Burr's Bank of the Manhattan Company competing against Hamilton's Bank of New York. In 1804 their rivalry erupted into a duel, leading to the death of Alexander Hamilton. The dueling pistols are owned by the successor company...</freebase-description>
    <freebase-pref-name>Chase Manhattan Bank</freebase-pref-name>
    <id type="integer">559</id>
    <is-private type="boolean" nil="true"></is-private>
    <name>Chase Bank</name>
    <stock-symbol nil="true"></stock-symbol>
    <updated-at type="datetime">2009-08-20T10:25:30Z</updated-at>
  </primary-organization>
  <secondary-organizations type="array"/>
  <summary>
    <summary>Tape lost at offsite storage location</summary>
  </summary>
  <comments type="array">
    <comment>
      <content>Just received the same letter - mine is dated 8/31 

Seems chase looses tapes a lot </content>
      <created_at>2009-09-03 22:57:46 UTC</created_at>
    </comment>
    <comment>
      <content>When I receive a letter like this, how do we know it is not a scam?  They ask you to fill in your name and SS # - sounds like a great scam to me.</content>
      <created_at>2009-09-05 06:09:26 UTC</created_at>
    </comment>
    <comment>
      <content>I got the same letter and had the same concern about sending them my SSN - does anyone know if the addres - Chase Identity Protection in Des Plaines, IL is legit?
</content>
      <created_at>2009-09-05 19:33:21 UTC</created_at>
    </comment>
    <comment>
      <content>I got this letter and have the very same question as the two posters above.   I did a google on the toll-free number and that's what led me to this site.

So how do we know this is for real?</content>
      <created_at>2009-09-06 13:53:43 UTC</created_at>
    </comment>
    <comment>
      <content>For those asking if this letter might be a scam/phish attempt:  have any Chase account holders called a *verified* Chase support number to ask about the legitimacy of the letter?  If so, please mail us at curators@datalossdb.org to let us know what you find out.  If this is a bogus incident, we will remove it from the database.</content>
      <created_at>2009-09-06 23:52:33 UTC</created_at>
    </comment>
    <comment>
      <content>My August 31 letter was signed by Patirica O. Baker, Senior Vice President, Executive Office.  A search of the Chase site failed to identify this person.  </content>
      <created_at>2009-09-08 08:14:53 UTC</created_at>
    </comment>
    <comment>
      <content>I just spoke to a Chase &quot;security specialist&quot; and they could not find any evidence that this is a legitimate letter.  Mine is dated 8/31/2009 and includes a business reply envelope to PO Box 2508, Des Plaines, IL 60019-9115 and she said that address is not in her database.  Chase customer correspondence typically goes to Delaware.  I'm still going to investigate further, but I'm not sending my SSN anywhere yet.
</content>
      <created_at>2009-09-08 08:21:49 UTC</created_at>
    </comment>
    <comment>
      <content>I called Chase Identity Protection at 1-888-217-0291 and they claim it is legitimate.  A tape was lost. </content>
      <created_at>2009-09-08 08:32:53 UTC</created_at>
    </comment>
    <comment>
      <content>I contacted Chase.  They were not able to confirm either the phone number or address shown on the letter.  According to Chase, if this incident had really occurred they would have record of it linked to my accounts.  There was no such record, so this is apparently a scam</content>
      <created_at>2009-09-08 10:27:14 UTC</created_at>
    </comment>
    <comment>
      <content>I called the phone number on the letter (1-888-821-4277) and they indicated that there is a missing tape that contains addresses and Social Security numbers.  I asked why I need to provide my SSN to request the free year of     Identity Protection, and wasn't given an entirely clear answer.  However, the operator said if I was more comfortable doing so, I could go to a Chase branch to register for the free Chase Identity Protection.  That would certainly seem to indicate it is legitimate. </content>
      <created_at>2009-09-08 16:03:45 UTC</created_at>
    </comment>
    <comment>
      <content>Come on people wake up, you never give your SS# to anyone at anytime if &quot;they&quot; contact you and ask for it.  Call THE main # at any bank back if you are ever contacted for this kind of info.  And oh my god, look at those &quot;Chase&quot; letters, they say we lost a tape but call us with your SS# for &quot;free&quot; protection.  Were you born yesterday?  Wow.  </content>
      <created_at>2009-09-08 16:09:17 UTC</created_at>
    </comment>
    <comment>
      <content>Paranoia is certainly prudent where your SSN and other personal information is involved.  However, first class mail is a legally recognized method of notifying customers of potential security breaches.  If you've received a letter, consider yourself notified.  Chase may be hoping that people don't take advantage of their offer, who knows.  I've called five different numbers, toll-free and otherwise, and received &quot;don't know what you're talking about&quot; from three, and &quot;yes a tape has been lost&quot; from two. So, as was suggested above, I went to a Chase branch.  The person helping me was not aware of the issue, but made a phone call and validated.  I am now registered for one year free of Chase Identity Protection, with no automatic renewal (they don't even have a credit card number to charge since I no longer have any accouts with them.)  </content>
      <created_at>2009-09-09 11:50:50 UTC</created_at>
    </comment>
    <comment>
      <content>I called the Chase Identity Protection at 1-866-578-0345 to verify if the letter is legitimate. I did not call the number in the letter. Instead, I got the phone number from the website &lt;https://www.chaseidprotection.com/Contact-us.aspx&gt;

The person who helped me said the letter is legitimate.
</content>
      <created_at>2009-09-09 15:28:55 UTC</created_at>
    </comment>
    <comment>
      <content>Has anyone spoken to a rep at CHASE, not Chase Identity Theft Protection to verify? </content>
      <created_at>2009-09-14 12:48:33 UTC</created_at>
    </comment>
    <comment>
      <content>I called the 800 number on my CHASE credit card just now for customer service.  It is a SCAM.  She said they would never ask for social security number.  Chase logos and trademarks were photo-shopped.  She asked me to spread the world, do NOT fill out the form asking for your social security in order to get free credit reporting.</content>
      <created_at>2009-10-15 09:40:40 UTC</created_at>
    </comment>
    <comment>
      <content>It is not a scam - the credit monitoring is done by a vendor, and they need SSN to enroll you.</content>
      <created_at>2009-11-07 16:31:22 UTC</created_at>
    </comment>
    <comment>
      <content>I received this same letter in August and contacted Chase.  They verified the incident but could not provide any other information, in particualar how they even got my information since I have never to my knowledge been a Chase customer.  Personally I think this is  deceptive marketing on Chase's part to sell their Identity Protection Service.  I am willing to bet that they bought a mailing list with my name and address and never had my information in the first place.  I filed a complaint with the Better Business Bureau and after about 5 months just received a response from Chase that does not say anything more than the original letter.  I will reject this response through the BBB and continue to pursue through them.  Chase should be made to pay for these slimy business practices. 

Lastly, it seems to be quite a coincidence that my receipt of this letter from Chase coincides with a rather intense marketing push where I live (SF Bay Area).   </content>
      <created_at>2009-12-24 12:43:30 UTC</created_at>
    </comment>
    <comment>
      <content>I just received same letter I'm not falling for this.</content>
      <created_at>2010-01-14 09:13:10 UTC</created_at>
    </comment>
    <comment>
      <content>I just received the similar letter with my last four digit of my account number on it. I will go to a local Chase branch to check it out. </content>
      <created_at>2010-01-15 01:36:43 UTC</created_at>
    </comment>
    <comment>
      <content>mine dated 1-14-10,  why do they even need our ss #, don't they have it already?  damn bank too big to fail ,uuuhhhmm.</content>
      <created_at>2010-01-15 20:13:39 UTC</created_at>
    </comment>
    <comment>
      <content>Our was letter dated 01/14/10, but they gave another bogus reason for us to sign up for their free years identity protection; &quot;they accidentally posted our closed account info on a website!&quot;  Our account there has been closed for months and I really doubt that we'll ever do business with Chase Bank again.</content>
      <created_at>2010-01-20 12:48:47 UTC</created_at>
    </comment>
    <comment>
      <content>ours dated 02/19/10, said that our info was accessed and we may be contacted by law enforcement.  I figured SCAM too because they have our social security number and shouldn't need it.  </content>
      <created_at>2010-03-03 19:38:55 UTC</created_at>
    </comment>
    <comment>
      <content>http://www.bankinfosecurity.com/articles.php?art_id=1768

</content>
      <created_at>2010-03-03 19:41:06 UTC</created_at>
    </comment>
    <comment>
      <content>A new incident.

We received a letter dated August 29, 2011 from Patricia Baker, Senior Vice President, saying credit files had been lost or misplaced, and offering us an opportunity to sign up for credit/identity theft protection from ITAC Sentinel.  It asks for mail, email, phone, and SS. Will seek to validate through Chase first.</content>
      <created_at>2011-09-02 03:10:37 UTC</created_at>
    </comment>
  </comments>
  <location>
    <address>United States</address>
    <thoroughfare_name></thoroughfare_name>
    <dependent_locality_name></dependent_locality_name>
    <locality_name></locality_name>
    <sub_administrative_area_name></sub_administrative_area_name>
    <administrative_area_name></administrative_area_name>
    <postal_code_number></postal_code_number>
    <country_name_code>US</country_name_code>
    <longitude>37.0902</longitude>
    <latitude>-95.7129</latitude>
    <accuracy>1</accuracy>
  </location>
</incident>

