Credit

Tue, May 12, 2020 09:23 AM

M-D041720-02 Data Disclosure Incident - Final Update


NOTICE DATE: May 12, 2020

NOTICE TYPE: M-D041720-02 Financial/Credit

SHORT DESCRIPTION: Data Disclosure Incident – Final Update

INTENDED AUDIENCE: ERCOT Counter-Parties

DAYS AFFECTED: March 13 & 16, 2020

LONG DESCRIPTION:  On April 15, 2020, one of ERCOT’s financial institutions, JPMorgan Chase Bank, N.A. (JPM) notified ERCOT that JPM experienced an internal data code issue, which resulted in the inclusion of bank account and financial transaction data belonging to ERCOT Counter-Parties in balance and transaction reports that were downloaded by 18 JPM clients/customers on March 16 and 17, 2020. The balance and transaction reports downloaded by JPM’s clients/customers contained data for Business Days March 13 and 16, 2020. JPM informed ERCOT that it identified the issue on March 17, 2020 and immediately implemented a code fix to prevent further recurrence. JPM has assured ERCOT that this event was not the result of a cyber incident; it was an internal software code issue.

On May 8, 2020, ERCOT received confirmation from JPM that all 18 JPM clients/customers that downloaded the reports containing ERCOT and Counter-Party data for Business Days March 13 and 16, 2020 had deleted the reports and/or data contained in those reports. JPM further informed ERCOT that six of those JPM clients/customers did not view the ERCOT/Counter-Party data contained in the reports. JPM has advised ERCOT that due to confidentiality restrictions it is unable to provide the identities of the 18 JPM clients/customers that downloaded the reports. Please be advised that JPM will discuss the data included in the disclosure belonging to a particular Counter-Party if such Counter-Party contacts JPM directly to discuss the incident.

CONTACT: If you have any questions, please contact your ERCOT Account Manager. You may also call the general ERCOT Client Services phone number at (512) 248-3900 or contact ERCOT Client Services via email at ClientServices@ercot.com.

If you are receiving email from a public ERCOT distribution list that you no longer wish to receive, please follow this link in order to unsubscribe from this list: http://lists.ercot.com.

 

dg