Ameritrade Notifies Customers Of Data Breach -- Proactively - InformationWeek

InformationWeek is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

IoT
IoT
Infrastructure // PC & Servers
Commentary
9/14/2007
11:48 AM
Tom Smith
Tom Smith
Commentary
50%
50%

Ameritrade Notifies Customers Of Data Breach -- Proactively

Online brokerage TD Ameritrade is warning customers today that some of their personal information, including e-mail addresses, was accessed by an external source. Its handling of the situation shows there's some progress being made toward more proactive disclosure of security breaches, since the disclosure comes before any known loss of personal identity data such as Social Security numbers.

Online brokerage TD Ameritrade is warning customers today that some of their personal information, including e-mail addresses, was accessed by an external source. Its handling of the situation shows there's some progress being made toward more proactive disclosure of security breaches, since the disclosure comes before any known loss of personal identity data such as Social Security numbers.In a letter to account holders (full disclosure: I received the letter), CEO Joe Moglia explains:

While investigating client reports about the industry-wide issue of investment-related SPAM, we recently discovered and eliminated unauthorized code from our systems. This code allowed certain information stored in one of our databases, including e-mail addresses, to be retrieved by an external source.

Please be assured that UserIDs and passwords are not included in this database, and we can confirm that your assets remain secure at TD AMERITRADE.

He goes on to say the code was quickly eliminated and customer assets are protected in the event of any loss. Of course, if someone's identity gets stolen as a result of this, that's another matter. The letter also says:

While Social Security numbers are stored in this particular database, we have no evidence to establish they were retrieved or used to commit identity theft.

I'll take the liberty of appending "yet" to that final sentence.

As a potential identity theft victim, this explanation doesn't give me much comfort. It makes me even more uneasy about sharing personal data or using online financial services. Obviously there was a significant security hole that allowed the "unauthorized code" to get in. I just hope that gap has been closed permanently.

Although User IDs and passwords apparently weren't breached, I'd still like to see TD Ameritrade put tougher account access requirements in place. (Vanguard Group and HSBC Direct are two examples of online transaction sites with a more rigorous sign-on process).

This will be the third time Ameritrade has made it onto the Privacy Rights Clearinghouse's list of data breaches. The first two were small in comparison with many of the higher-profile breaches that have occurred.

Yet I appreciate what appears to be a proactive stance by Ameritrade to make this notification. Let's just hope it results in nothing more than some additional spam. Update 2:25 p.m on 9/14/07: See our complete news coverage by Sharon Gaudin here.

We welcome your comments on this topic on our social media channels, or [contact us directly] with questions about the site.
Comment  | 
Print  | 
More Insights
InformationWeek Is Getting an Upgrade!

Find out more about our plans to improve the look, functionality, and performance of the InformationWeek site in the coming months.

Slideshows
11 Things IT Professionals Wish They Knew Earlier in Their Careers
Lisa Morgan, Freelance Writer,  4/6/2021
News
Time to Shift Your Job Search Out of Neutral
Jessica Davis, Senior Editor, Enterprise Apps,  3/31/2021
Commentary
Does Identity Hinder Hybrid-Cloud and Multi-Cloud Adoption?
Joao-Pierre S. Ruth, Senior Writer,  4/1/2021
White Papers
Register for InformationWeek Newsletters
Video
Current Issue
Successful Strategies for Digital Transformation
Download this report to learn about the latest technologies and best practices or ensuring a successful transition from outdated business transformation tactics.
Slideshows
Flash Poll