Scottrade Financial Services, Inc.

Genpact, a service provider to Scottrade Bank, experienced a data security incident where a dataset containing personal and credit information for commercial loan/lease applicants was uploaded to a cloud server without full security protocols. The data was exposed from Jan 12, 2017 to Apr 2, 2017. The issue was traced to a configuration error. 49 New Hampshire residents were affected. Data included SSNs, names, addresses, and phone numbers. No evidence of misuse was found. Genpact offered 24 months of credit monitoring.

Scottrade, Inc. notified clients in October 2015 that federal law enforcement investigation revealed unauthorized access to a database between late 2013 and early 2014. The incident involved the theft of client names, street addresses, Social Security numbers, and email addresses. Trading platforms and client funds were not compromised. Scottrade engaged forensic investigators, secured the intrusion point, and provided one year of identity protection services.

Scottrade, Inc. disclosed that unauthorized access to its systems occurred between late 2013 and early 2014, resulting in the theft of client names, addresses, and potentially SSNs and emails from approximately 4.6 million clients. The incident was discovered in August 2015 following a federal law enforcement investigation. Scottrade notified clients starting October 2, 2015, and offered one year of identity protection services.

Scottrade Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2015-10-02. 112,505 Massachusetts residents were affected. The report records the breach type as electronic.

Scottrade, Inc. (brokerage, Member FINRA/SIPC) suffered unauthorized access to a client database over a period of several months between late 2013 and early 2014. Federal law enforcement officials informed Scottrade of the breach, which involved theft of client names and street addresses; SSNs and email addresses were present but contact information was the primary target. Clients were notified on October 2, 2015, with AllClear ID identity protection offered.

Scottrade Financial Services, Inc. notified the Washington AG of a data security incident where a vendor, Wall Street Concepts, inadvertently mailed corrected 1099 forms to outdated addresses. The forms contained names, addresses, account numbers, and last four digits of SSNs. Approximately 812 clients were affected, including 18 Washington residents. Scottrade offered one year of free credit monitoring.

Scottrade Financial Services, Inc. notified the NH DOJ of a data security incident where a vendor, Wall Street Concepts, inadvertently mailed corrected 1099 forms to outdated client addresses. The incident affected approximately 812 clients (including 4 NH residents). Data exposed included names, addresses, account numbers, and last 4 digits of SSNs. Scottrade is offering one year of free credit monitoring via Equifax.