Categories: News

SEC fines eight companies for cybersecurity breaches

The U.S. Securities and Exchange Commission (SEC) decided out sanctions for cybersecurity breaches against eight firms. According to SEC, the companies have lax rules for this. Therefore, hackers managed to access and steal the data.

Cybersecurity breaches

SEC named the Cetera Entities, Cambridge companies and KMS Financial Services for the most lackluster cybersecurity policies which led to email account takeovers. Thus, thousands of people’s personal information was compromised.

The companies work as broker dealers, investment advisory, or both. According to SEC, the Cetera and Cambridge companies will each pay a $300,000 penalty, while KMS will pay $200,000.

The SEC has found that Cetera leaked more than 4,300 people’s personal information over the last few years. And this happened after hackers managed to access 60 cloud-based email accounts. But the SEC did not list which types of personal information were leaked in each case.

According to SEC, the companies did not protect the accounts ”in a manner consistent with the Cetera Entities’ policies.” Moreover, they sent breach notifications suggesting that they issued them sooner than they actually did.

Also, fifteen KMS financial advisers had their accounts taken over. The breach exposed a great deal of customer information, so it affected 5,000 people. KMS didn’t make any changes to its cybersecurity policies until May 2020. Still, they weren’t implemented until August 2020.

They violated the Safeguards Rule

SEC mentioned that all the companies violated the Safeguards Rule that protects customer information. Also, they said that Cetera violated other rules related to the notification letters.

Kristina Littman, chief of the SEC Enforcement Division’s Cyber Unit, said advisers and dealers need to fulfill their obligations. And this is even more important concerning the protection of customer information. She mentioned that security measures are in vain if they companies do not implement them or do it just partially.

Laurentiu Titei

Recent Posts

How to Block Third-Party Cookies in a Browser

This website uses cookies” pop-up often appears when you visit a website on your browser.…

26 mins ago

How to Install VPN on Smart TV: Step by Step Guide

Almost every smart TV is packed up with several pre-installed apps, but there are also…

1 day ago

How to Configure a Virtual Directory on Windows IIS Server

Understanding a virtual directory and how to create it on a Windows IIS (Internet Information…

2 days ago

Best Wise Alternative Apps

Wise, a financial technology company, specializes in cross-border money transfers, currency conversion, and international account…

3 days ago

Best Payment Gateways for Safe Payments

With ever-growing digital payments, business owners often find themselves confused about which payment gateways to…

4 days ago

What is a Browser Fingerprinting: Complete Guide

To maintain the privacy of your device information and device is a big challenge in…

5 days ago