NOTICE: If you had a wealth management or other financial account with Morgan Stanley and received a NOTICE OF DATA BREACH, contact the Arnold Law Firm at (916) 777-7777.
On July 10, 2020, one of the world’s foremost financial institutions Morgan Stanley notified affected current and former clients of two separate data security incidents involving confidential personal information left on decommissioned computer equipment.
Data Center Event
In 2016, Morgan Stanley closed two data centers and decommissioned computer equipment that processed client information in both locations. Some servers and other hardware were sold to recyclers, however, these devices were not sufficiently scrubbed of information and contained unencrypted client data.WAAS Device Event
In 2019, in a separate event, Morgan Stanley replaced computer servers (WAAS devices) that contained personal information in local branch offices. During a recent inventory, some of the decommissioned equipment was missing. A known software flaw is thought to have resulted in data remaining on the missing disks in unencrypted form. Compromised sensitive information that may have remained on the involved devices includes:- Account names
- Account numbers (for Morgan Stanley and any linked bank accounts)
- Social Security numbers
- Passport numbers
- Contact information
- Dates of birth
- Asset values
- Holdings data
If you had an account with Morgan Stanley and received a NOTICE OF DATA BREACH, contact the Arnold Law Firm at (916) 777-7777 to discuss your situation and possible legal options.