Ameritrade Knew About Data Leak Long Before It Told Customers
from the quite-some-time,-it-seems dept
Late Friday, the news broke that TD Ameritrade is the latest in a long, long, long, long, long list of companies who have leaked data of its customers. In this case (as in many others) it was apparently due to their computers getting hacked. Considering how many similar stories we see, it almost didn't seem worth writing about. However, it appears that Ameritrade was well aware of the hacking long before they disclosed it. According to a lawsuit that was filed months ago, Ameritrade users had been receiving stock spam to unique email addresses provided only to Ameritrade as far back as October of 2006 -- and some of those users had reported this to Ameritrade. Then, back in May, Slashdot ran a detailed piece on the apparent leaking of Ameritrade email addresses, and even questioned why Ameritrade had not disclosed this breach, as is required under California law. The lawsuit, filed at the end of May, questions this as well. Yet, Ameritrade waited until now to disclose that their systems had been hacked, making email addresses available to people. Amusingly, Slashdot's report on this fails to note Slashdot's earlier story that helped spur the lawsuit and apparently pushed Ameritrade to finally investigate the claims. Either way, it raises questions about why Ameritrade waited this long to inform its customers that their emails had been leaked, despite pretty clear evidence of a leak from quite some time ago.
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
Filed Under: data leaks, notification, security
Companies: td ameritrade
Reader Comments
Subscribe: RSS
View by: Time | Thread
THE COSTUMER COMES FIRST. BOTTOM LINE.
[ link to this | view in chronology ]
Re:
[ link to this | view in chronology ]
Re:
So which is it? Does the customer come first, or the bottom line? Because it looks like most companies these days are going with option #2.
[ link to this | view in chronology ]
No one wants to be made a fool...
[ link to this | view in chronology ]
Raises questions.. does it really? We all know why big corporations never come out with them, cover them up, or just outright don't even acknowledge something is wrong. They dont care, and never will until someone with a backbone makes them pay for it with a fine that actually HURTS their business. Sure slap a $140,000 lawsuit on them. It's pettycash, what do they care. The NFL suit for half a million; their tax rightoffs are bigger than that. The industry wants you to sue them, so that the next time it happens the outcome is already known. More frivilous lawsuits there are the more a judge is going to have to rely on everyone elses previous judgements of "I dont care just get me to my lunchbreak already" sort of mentality. Whine bitch and moan all you want on a blog, it'd be just as usefull as shouting at the board members face to face. The mechanism to push you aside and erase your complaint is already in place, it's called your business.
[ link to this | view in chronology ]
Oh and the fact Slashdot's editors missed their own story that could tie in with this new one doesn't surprise me. For a while now they've had some inept editors. Such as the one that was mistagging everything 'Enlightening' as if it was the definition of the word and not the name of something.
Seriously has gone downhill for a while now.
[ link to this | view in chronology ]
Slashdot's Reporting
[ link to this | view in chronology ]
I'm a victim!
I should have also notified the media. I was definitely upset that Ameritrade didn't disclose this within a month or 2.
As of Sept 12, 2007 I'm still receiving email to that address and reporting it to TD Ameritrade and the SEC. The email is stock spam and Storm worm infection email.
[ link to this | view in chronology ]
Email from TD Ameritrade
[ link to this | view in chronology ]
Re: Email from TD Ameritrade
[ link to this | view in chronology ]
fines
[ link to this | view in chronology ]
Earlier than that
[ link to this | view in chronology ]