Morgan Stanley Smith Barney LLC notified South Carolina residents of two data security incidents involving the improper disposal of computer equipment. In 2016, decommissioned devices contained unencrypted data. In 2019, a replaced server's encrypted disks contained residual data due to a software flaw. Morgan Stanley stated no unauthorized access was detected but offered 24 months of credit monitoring via Experian.