Wall Street's big banks are lousy with highly educated people yanked from among the top performers at the world's best business schools and universities. They are elite and powerful. And sometimes, like every human, they do very dumb things.
Here's the deal: Morgan Stanley just got slapped with a $35 million fine for "astonishing" failures that led to the mishandling of sensitive data on some 15 million customers, my colleague Matt Egan writes.
The mistake? Tossing out old computers without wiping the hard drives.
In one episode described by the Securities and Exchange Commission, Morgan Stanley hired a moving company — which had "no experience or expertise" in data destruction — to decommission thousands of hard drives and servers holding customer data.
That company later sold thousands of those devices, some of which contained personal identifying information, to a third party. Eventually, the devices, still loaded up with sensitive data, wound up on an auction site.
The SEC didn't mince words in laying out Morgan Stanley's missteps.
Its "failures in this case are astonishing," Gurbir Grewal, director of the SEC's enforcement division, said in a statement. "If not properly safeguarded, this sensitive information can end up in the wrong hands and have disastrous consequences for investors."
So, yeah, it was pretty dumb. But it's important to note the SEC's not alleging anything criminal did happen, just that it could have.
Morgan Stanley agreed to pay the fine without admitting or denying the findings in the settlement.
"We have previously notified applicable clients regarding these matters, which occurred several years ago, and have not detected any unauthorized access to, or misuse of, personal client information," Morgan Stanley said in a statement.
Another way to put that is: We got lucky and no bad actors managed to exploit the data we carelessly released to the public, as far as we know.
Free advice for next time, y'all: Call tech support! We can all be luddites, guys — it's nothing to be ashamed of.
Comments
Post a Comment