© Reuters. FILE PHOTO: The corporate logo of financial firm Morgan Stanley is pictured on the company’s world headquarters in New York, U.S. April 17, 2017. REUTERS/Shannon Stapleton(Reuters) -Morgan Stanley has disclosed that personal data of some of its corporate clients was stolen in a data breach in January involving a third-party vendor, in which hackers accessed information, including social security numbers of some clients.
The bank was notified of the breach in May by Guidehouse, a vendor that provides account maintenance services to Morgan Stanley (NYSE:)’s StockPlan Connect business, it said in a letter dated July 2.
Files stolen included client names, addresses, date of birth, social security numbers and corporate company names, the bank said.
Attackers gained access to the information by exploiting a vulnerability in Guidehouse’s server Accellion FTA. The vulnerability was patched within five days.
Although the files were encrypted, the attackers were able to obtain the decryption key during the breach, the bank said.
“We are in close contact with Guidehouse and are taking steps to mitigate potential risks to clients,” a bank spokesperson said.
The hack, reported earlier by technology news portal Bleeping Computer, was discovered in March by Guidehouse and its impact on Morgan Stanley was found in May, the letter said.
Fusion Media or anyone involved with Fusion Media will not accept any liability for loss or damage as a result of reliance on the information including data, quotes, charts and buy/sell signals contained within this website. Please be fully informed regarding the risks and costs associated with trading the financial markets, it is one of the riskiest investment forms possible.
