JPMorgan, Citi, Morgan Stanley shopper knowledge could also be uncovered by vendor’s hack, NYT stories