Every public data breach

Disclosed this week47On record26,367

47 disclosed this week · 26,367 on record

Morgan Stanley

Disclosed Jul 10, 202014,256,250 affectedConfirmed

Official notice

What is known

People affected14,256,250 (as reported by the organization)
DisclosedJul 10, 2020
DiscoveredMay 20, 2021
HappenedJan 20, 2021
AttackHacking
Data exposedNamesSocial Security numbers
SectorTech · US
StatusConfirmed

Sources

Official noticeoag.ca.gov
California Attorney General breach notice: Morgan Stanley
Official noticeatg.wa.gov
Washington Attorney General breach notice: Morgan Stanley
Official noticejustice.oregon.gov
Oregon DOJ breach notice: Morgan Stanley
Official noticein.gov
Indiana Attorney General 2021 data breach report: Morgan Stanley
Official noticein.gov
Indiana Attorney General 2020 data breach report: Morgan Stanley
Official noticemaine.gov
Maine Attorney General breach notice archive: Morgan Stanley

Notices filed

Residents of CAJul 10, 2020
California AGCount not stated
Residents of WAJul 10, 2020
Washington AG401,246 people
Residents of ORJul 10, 2020
Oregon DOJ209,881 people
Residents of INJul 10, 2020
Indiana AG154,619 people
Residents of INJul 10, 2020
Indiana AG450 people
Residents of MEJul 10, 2020
Maine AG490 people
Residents of CAJul 2, 2021
California AGCount not stated
Residents of WAJul 2, 2021
Washington AG2,080 people
Residents of ORJul 2, 2021
Oregon DOJ33,443 people
Residents of INJul 2, 2021
Indiana AG395 people

Other breaches at Morgan Stanley

Auctioned devices with unwiped customer data; USD 6.5M multistate settlementLost or stolen device exposed names, Social Security numbers and financial details.Lost or stolen deviceFinanceUSNov 16, 2023SEC fines Morgan Stanley $35M over lost drives holding data of 15M customersVendor breach exposed names, financial details and health records. Reported to the HHS archive.Vendor breach15M affectedFinanceUSSep 20, 2022
History of this record
data_types2026-09-25
[] to ["names","ssn"]by backfillSource
source2026-09-25
empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2020.pdfby backfillSource
records2026-09-25
33443 to 14256250by backfillSource
records_basis2026-09-25
empty to organizationby backfillSource
records2026-09-25
empty to 33443by backfillSource
attack2026-09-25
unknown to hackingby backfillSource
discovered2026-09-25
empty to 2021-05-20by backfillSource
disclosed2026-09-25
2021-07-02 to 2020-07-10by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Morgan Stanley