JPMorgan hack: It could have been worse