SHARE
Morgan Stanley has disclosed that some of its corporate customers had their data stolen following a data breach at a third-party vendor.
The data breach involved Guidehouse Inc., a company that provides account maintenance services to Morgan Stanley’s StockPlan Connect Business. The data breach took place in January and was initially discovered by Guidehouse in March, with the link to Morgan Stanley later found in May. Morgan Stanley informed those affected in a letter dated July 2, according to Reuters.
The data stolen included client names, addresses, date of birth and corporate company names.
The attack vector involved hackers exploiting a vulnerability in software from Accellion Inc. used by Guidehouse. The form of attack was not disclosed, previous Accellion FTA-related attacks have involved the Clop ransomware gang.