VerticalScope Inc.

• •Invalidating passwords of all VerticalScope user accounts
• •Posted a site security notification on each site updating users on the potential risk to certain accounts, the password reset and steps we are implementing to improve security
• •Implementing stronger password rules (passwords now require a minimum of 10+ characters and a mixture of upper- and lower-case letters, numbers and symbols) along with automated account password expiries to encourage more frequent password changes
• •Remind our users to use good password practices (not using the same password for multiple online accounts and using unique strong passwords)
• •Implementing additional safeguards to detect, alert and mitigate any future brute force attempts
• •Notified our third party vendors that interact with our various forum API's of the February breach to allow their own security teams to investigate
• •Continuing our investigation and will be collecting information to provide to the appropriate law enforcement authorities
• •Taking steps to investigate and test new encryption and security technologies to further protect our users

• •Implementing stronger password rules (passwords now require a minimum of 10+ characters and a mixture of upper- and lower-case letters, numbers and symbols) along with automated account password expiries to encourage more frequent password changes
• •Implementing additional safeguards to detect, alert and mitigate any future brute force attempts
• •Taking steps to investigate and test new encryption and security technologies to further protect our users

DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).