The New York Times credits Hold Security with the initial discovery of the JPMorgan Chase breach.