AccidentalFinancial ServicesFinanceDisposal ErrorData ExfiltratedIdentity (basic)Government IDFinancial accountMediumContained

MORGAN STANLEY SMITH BARNEY LLC

bd_6072fc7b4fa6d370 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jul 10, 2020

To disclose

—

Affected

Not disclosed

Confidence

64%

Full breach record for MORGAN STANLEY SMITH BARNEY LLC →4 incidents on file

Morgan Stanley Smith Barney LLC notified South Carolina residents of two data security incidents involving the improper disposal of computer equipment. In 2016, decommissioned devices contained unencrypted data. In 2019, a replaced server's encrypted disks contained residual data due to a software flaw. Morgan Stanley stated no unauthorized access was detected but offered 24 months of credit monitoring via Experian.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 1, 2016

Begins

Jul 10, 2020

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: MORGAN STANLEY SMITH BARNEY LLC
norm: morgan stanley smith barney

Name: MORGAN STANLEY SMITH BARNEY LLC
norm: morgan stanley smith barney
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Jan 1, 2016 – Dec 31, 2019
Materiality determined: —
Notification sent: Jul 10, 2020
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unknown

During the incident: Arranged with Experian to provide Experian IdentityWorks credit monitoring and fraud detection services for 24 months at no charge
Instituted enhanced security procedures on accounts, including continuous fraud monitoring and monitoring of information about malicious online activity and evidence of misuse of any Morgan Stanley data
Continuously monitored these situations and have not detected any unauthorized activity related to the incidents
Changes made: Contracted with a vendor to remove data from decommissioned devices
Disconnected and replaced a computer server in a local branch office
Worked with outside technical experts to understand the facts and any potential risks
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2020/MorganStanley.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 10, 2020
Raw hash: 78a1402a5745a5d67237b0677703039117778ddb254fbc7758d187161c40b7b0

Reporting entityMORGAN STANLEY SMITH BARNEY LLC

Victim entityMORGAN STANLEY SMITH BARNEY LLC

IncidentUnknown

Stated responseArranged with Experian to provide Experian IdentityWorks credit monitoring and fraud detection services for 24 months at no charge

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov