PhysicalFinancial ServicesFinanceLossCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

STERNE, AGEE & LEACH, INC.

bd_9ff3e9e81bee7d47 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jun 26, 2014

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

63%

Full breach record for STERNE, AGEE & LEACH, INC. →

Sterne, Agee & Leach reported the loss of an unencrypted firm-issued laptop between May 29-30, 2014. The device contained personal information for Private Client Group customers, including names, addresses, account numbers, and Social Security numbers. The firm confirmed the laptop was not used to access servers but could not rule out local data access. Remediation included encrypting all laptops and enhancing security policies. Affected customers were offered one year of Experian ProtectMyID.

J jump to incidentP pin to compareR raw source

Incident timeline

May 29, 2014

Begins

Jun 26, 2014

Filed

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Delaware State AGbd_59e96bf6b8479a062014-06-26Verified

Name: STERNE, AGEE & LEACH, INC.
norm: sterne agee leach

Name: STERNE, AGEE & LEACH, INC.
norm: sterne agee leach
Industry: Financial Servicesllm

Discovered: —
Breach occurred: May 29, 2014 – May 30, 2014
Materiality determined: —
Notification sent: Jun 27, 2014
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium

During the incident: Conducted an immediate investigation
Filed a police report relating to this incident
Offering all potentially impacted customers a one-year membership to Experian’s ProtectMyID Alert at no cost
Changes made: All laptops are now encrypted
Data information security policies have been enhanced
Employees have received additional instruction on data security protocols and compliance
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Delaware State AGJun 26 · first

California State AGJun 26 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-45666
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 26, 2014
Raw hash: a622f044c16a9bbc268637dc763aa2004271e889fa44359890b075d25faa9ec3

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entitySTERNE, AGEE & LEACH, INC.

Victim entitySTERNE, AGEE & LEACH, INC.

IncidentUnknown

Stated responseConducted an immediate investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov