Customers accuse the financial firm in a class-action complaint of failing to safeguard personal information, including social security numbers and birthdays, that were stored on servers at former data centers.
- Morgan Stanley failed to detect for years that previously “deleted” data had been left unencrypted on servers, and when they did discover it, it took them over a year, possibly longer, to report it to the affected individuals and the states’ Attorneys General, the customers said
- “Those servers are also missing” now, according to the lawsuit
- Morgan Stanley didn’t immediately respond to a request for comment, made after regular business ...
Learn more about Bloomberg Law or Log In to keep reading:
See Breaking News in Context
Bloomberg Law provides trusted coverage of current events enhanced with legal analysis.
Already a subscriber?
Log in to keep reading or access research tools and resources.