Breachesby GlyphMorgan Stanley
Disclosed Nov 16, 2023Settled
Auctioned devices with unwiped customer data; USD 6.5M multistate settlement
Morgan Stanley failed to decommission computers and erase unencrypted customer data before devices were auctioned, exposing personal information of millions of customers including 1.1 million New Yorkers. Five attorneys general secured USD 6.5M.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Nov 16, 2023 |
| Attack | Lost or stolen device |
| Data exposed | NamesSocial Security numbersFinancial |
| Sector | Finance · US |
| Status | Settled |
| Lawsuit or fine | USD 6.5M five-AG settlement (Nov 2023) (about $6.5M) |
Sources
Notices filed
Other breaches at Morgan Stanley
SEC fines Morgan Stanley $35M over lost drives holding data of 15M customersVendor breach exposed names, financial details and health records. Reported to the HHS archive.Vendor breach15M affectedFinanceUSSep 20, 2022Hacking breachHacking exposed names and Social Security numbers. Reported to the California AG.14M affectedTechUSJul 10, 2020
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.