CHARLES SCHWAB & CO., INC.

Charles Schwab & Co., Inc. reported an insider wrongdoing incident in Maine affecting 774 individuals (4 Maine residents). The breach occurred between March 6, 2023, and April 19, 2023. Driver's license numbers and names were compromised. Schwab provided written notification and 48 months of credit monitoring via Soniq's IdentityForce.

Charles Schwab & Co., Inc. reported a data breach involving the inadvertent sending of chat and email messages to external email systems between May 18, 2021, and December 16, 2021. Affected data included names, Social Security numbers, tax IDs, driver's licenses, passports, and usernames/passwords. No evidence of account misuse was found. Schwab provided two years of free credit monitoring and identity protection via IdentityForce.

Financial services firm Charles Schwab & Co., Inc. reported an inadvertent disclosure of personal information affecting 5,083 individuals. The breach, which occurred between May 18, 2021, and December 16, 2021, was discovered on March 4, 2022. The compromised data included names and driver's license or non-driver identification card numbers. The company provided written notification to affected individuals and offered 24 months of credit monitoring and identity protection services.

Charles Schwab & Co., Inc. reported a data breach to the Montana Attorney General. The breach was reported on 2022-03-23. The breach occurred from 5/18/2021 to 12/16/2021. 17 Montana residents were affected.

Charles Schwab & Co., Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2016-11-11. The breach occurred during 3/25/2016. The breach was discovered on 4/14/2016. 22,442 individuals were affected. Notice was sent on 5/4/2016.

Charles Schwab & Co. reported a data breach to the Montana Attorney General. The breach was reported on 2016-05-04. The breach occurred on 3/25/2016. 6 Montana residents were affected.

Charles Schwab & Co., Inc. notified clients of unusual login activity beginning on or after March 25, 2016. The incident involved credential stuffing, where attackers used usernames and passwords obtained from non-Schwab sites to access Schwab accounts. Affected data included names, account numbers, positions, and transaction history. Schwab restricted access and monitored accounts.

Charles Schwab & Co., Inc. notified customers of unusual login activity beginning on or after March 25, 2016. The company believes attackers obtained usernames and passwords from non-Schwab accounts and used automated programs to test them against Schwab accounts (credential stuffing). Affected data includes names, account numbers, positions, and transaction history. Schwab restricted online access for affected accounts and is contacting clients to re-establish access. No indication that holdings were impacted.