Morgan Stanley
Disclosed Nov 16, 20232 years agoSettled
Auctioned devices with unwiped customer data; USD 6.5M multistate settlement
Morgan Stanley failed to decommission computers and erase unencrypted customer data before devices were auctioned, exposing personal information of millions of customers including 1.1 million New Yorkers. Five attorneys general secured USD 6.5M.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Nov 16, 2023 |
| Attack | Lost or stolen device |
| Data exposed | Names, Social Security numbers, Financial |
| Sector | Finance · US |
| Status | Settled |
| Lawsuit or fine | USD 6.5M five-AG settlement (Nov 2023) (about $6.5M) |
Sources
| Source | |
|---|---|
| NY AG: USD 6.5 Million from Morgan Stanleyag.ny.gov · Regulator | Regulator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Nov 16, 2023 |
Other breaches at Morgan Stanley
| Breach | Affected | ||||
|---|---|---|---|---|---|
| SEC fines Morgan Stanley $35M over lost drives holding data of 15M customersSep 20, 20224 years agoVendor breach | Sep 20, 20224 years ago | Vendor breach | Finance | Settled | 15M |
| Disclosed Jul 10, 2020Jul 10, 20206 years agoHacking | Jul 10, 20206 years ago | Hacking | Tech | Confirmed | 14M |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.