Nothing quite as disquieting as have the Feds show up on your doorstep with bad news. I once had the grave displeasure of working with a company that had the Secret Service come knocking. Apparently our affiliate company had been badly breached by a nefarious third party. They had come to tell us about malicious software that was installed on our servers. It was embarrassing in that the affected subsidiary did not proper monitoring in place and no one was doing even cursory log reviews. We had our posteriors handed to us and all we could do was sheepishly say thanks for the save. After the feds had departed, the CISO in that case had a brief examination of the affected systems done and “informed the business unit” and let it drop.
I can safely assume that there is a greater level of scrutiny being applied in the JPMorgan probe. I can well imagine the collective knot in the stomach of the security team at JPMorgan today.