Attackers gained a foothold on the company’s network because a server reportedly lacked two-factor authentication. The attackers stole the login credentials of a JPMorgan employee and were able to access the server, the New York Times reported. The bank was able to compromise names, addresses, phone numbers and email addresses, along with information about which line of business the customers were affiliated with. The attack was discovered after a compromise was detected in August on an external website set up for a charitable race sponsored by the bank.”]