MORGAN STANLEY
bd_1858bfd9dbcb4a68 · schema v1 · pii pii-v1
Full breach record for MORGAN STANLEY →15 incidents on fileMorgan Stanley notified the California AG of a data security incident involving a third-party vendor (Shareworks) that provides account maintenance services for Morgan Stanley's Stock Plan business. In May 2021, the vendor informed Morgan Stanley that an unauthorized individual had obtained personal information, including names, addresses, dates of birth, and Social Security numbers, from files in the vendor's possession. The data was obtained around January 2021 when the vendor's vulnerability was remediated. Morgan Stanley offered 24 months of complimentary credit monitoring through Experian to affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
Jan 1, 2021
Begins
May 1, 2021
Discovered
Jul 2, 2021
Filed
vs. sector median
on median
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- Montana State AGbd_1dcf72e45ca387ea2021-07-02Candidate
- Massachusetts State AGbd_1e9c1f725dd8e44c2021-07-02Verified
- Washington State AGbd_2bbc0c7d3717c2822021-07-02Verified by operator
- Indiana State AGbd_5b8fbd2622d600252021-07-02Verified
Show 3 more filings ↓Show fewer ↑up to 5d gap
- Oregon State AGbd_81be7ab9e152b1182021-07-02Verified by operator
- New Hampshire State AGbd_e0351b8a887f70af2021-07-02Verified
- New Hampshire State AGbd_992601bdd37ca5aa2021-07-07 · +5dVerified
Filing propagation · 8 filings · 7 states
View merged incident ↗Pattern: first filing Jul 2 (MT), last Jul 7 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.