This is interesting: "made off with a list of the applications and programs that run on every standard JPMorgan computer". That would mean source codes of the applications?
If they actually have all the source code that would be a pretty horrendous risk factor (not that my scenario is so great). We're getting into too-big-to-fail territory here; I really wonder if it's time regulators went beyond swingeing fines and actually revoked a bank's charter.
I would assume its literally what it says, the lists most big orgs maintain of their standard system configuration(s).