Tr?id=566623520170033&ev=PageView&noscript=1

FINRA Fines Osaic Wealth and Securities America for Cybersecurity Failures

Posted on October 30th, 2024 at 11:01 AM
FINRA Fines Osaic Wealth and Securities America for Cybersecurity Failures

From the desk of Jim Eccleston at Eccleston Law

The Financial Industry Regulatory Authority (FINRA) has fined and censured independent broker-dealers Osaic Wealth and Securities America for cybersecurity lapses that exposed the private information of over 32,000 customers. According to InvestmentNews, each firm has agreed to pay $150,000 for failing to establish and maintain adequate written supervisory procedures to protect client records and information.

FINRA's settlement letter, known as an Acceptance, Waiver and Consent (“AWC”), highlights the firms' deficiencies, including the lack of multi-factor authentication for email accounts, inadequate encryption for outbound emails containing customer non-public information, and insufficient maintenance of email access logs. Between January 2021 and March 2023, unauthorized third parties accessed sensitive information—such as social security numbers, bank account details, and driver's license numbers—of approximately 28,000 Osaic customers and 4,640 Securities America clients.

FINRA noted that its examiners had previously warned both firms about their inadequate cybersecurity controls at branch offices. The broker-dealers, owned by a parent company also using the Osaic name, had relied on an enterprise-wide cybersecurity policy provided by the parent. This policy allowed each branch to develop its own cybersecurity and data loss prevention programs, leading to inconsistencies.

The firms self-reported the incidents to FINRA and have accepted the penalties without admitting or denying the allegations. Following the breaches, Osaic and Securities America informed affected customers and engaged outside consultants to assist with their response. Since March 2023, both firms have strengthened their multi-factor authentication requirements for all business-related email accounts, according to InvestmentNews.

 

Eccleston Law LLC represents investors and financial advisors nationwide in securities, employment, transition, regulatory, and disciplinary matters.

Tags: eccleston, eccleston law, finra

Return to Archive

TESTIMONIALS

Previous
Next
Quotes Bigger

Jim, Stephany and the whole team were a God send.  We felt like we were put into a situation where we had no advocate. Jim’s team came in with a strong, well laid out strategy on how to get our story heard. Where our outside compliance company had no ability to help, our Broker Dealer was impenitent, and the regulators were aggressive pursuing vague rules, Jim came like a barricade against an assault we did not understand. Though you pay member dues to be affiliated with FINRA and a B/D, you have no voice. The only thing that is truly heard in this un-level playing field is a bulldog’s bark like Jim’s. I would encourage anyone to call Jim and his team to find a real ally in the tough and complicated world of securities regulation. They are truly the best.

Greg P.

LATEST NEWS AND ARTICLES

1784134373 Law
July 15, 2026
LPL Financial Faces Class Action Over Phoenix Annuity Disclosures

LPL Financial faces a proposed class action lawsuit alleging that the firm failed to warn annuity investors about the declining financial condition of Phoenix PHL Variable Insurance Company.

1784046159 Law
July 14, 2026
Mariner Wealth Advisors Reports Data Breach Affecting Nearly 9,000 Customers

Mariner Wealth Advisors LLC disclosed a data breach that exposed personal information of 8,995 customers, according to AdvisorHub.

1783957061 Law
July 13, 2026
FINRA Warns of Growing Risks From Finfluencers and AI-Driven Investment Content

Financial Industry Regulatory Authority (FINRA) regulators are raising concerns about the increasing influence of social media personalities and artificial intelligence (AI) on retail investors, particularly those managing their own investments without professional guidance.