Advertisement
Canada markets open in 3 hours 35 minutes
  • S&P/TSX

    24,471.17
    +168.87 (+0.69%)
     
  • S&P 500

    5,859.85
    +44.82 (+0.77%)
     
  • DOW

    43,065.22
    +201.36 (+0.47%)
     
  • CAD/USD

    0.7243
    -0.0006 (-0.08%)
     
  • CRUDE OIL

    70.12
    -3.71 (-5.03%)
     
  • Bitcoin CAD

    90,724.99
    +1,361.74 (+1.52%)
     
  • XRP CAD

    0.75
    +0.01 (+0.91%)
     
  • GOLD FUTURES

    2,670.20
    +4.60 (+0.17%)
     
  • RUSSELL 2000

    2,248.64
    +14.23 (+0.64%)
     
  • 10-Yr Bond

    4.0980
    +0.0250 (+0.61%)
     
  • NASDAQ futures

    20,581.00
    -38.25 (-0.19%)
     
  • VOLATILITY

    19.76
    +0.06 (+0.30%)
     
  • FTSE

    8,260.85
    -31.81 (-0.38%)
     
  • NIKKEI 225

    39,910.55
    +304.75 (+0.77%)
     
  • CAD/EUR

    0.6635
    -0.0007 (-0.11%)
     

Morgan Stanley to pay $60 million to resolve data security lawsuit

FILE PHOTO: The logo for Morgan Stanley is seen on the trading floor at the New York Stock Exchange (NYSE) in Manhattan, New York City

By Jonathan Stempel

NEW YORK (Reuters) - Morgan Stanley agreed to pay $60 million to settle a lawsuit by customers who said the Wall Street bank exposed their personal data when it twice failed to properly retire some of its older information technology.

A preliminary settlement of the proposed class action on behalf of about 15 million customers was filed on Friday night in Manhattan federal court, and requires approval by U.S. District Judge Analisa Torres.

Customers would receive at least two years of fraud insurance coverage, and each can apply for reimbursement of up to $10,000 in out-of-pocket losses.

Morgan Stanley denied wrongdoing in agreeing to settle, and has made "substantial" upgrades to its data security practices, according to settlement papers.

Customers accused Morgan Stanley of having in 2016 failed to decommission two wealth management data centers before the unencrypted equipment, which still contained customer data, was resold to unauthorized third parties.

They also said some older servers containing customer data went missing after Morgan Stanley transferred them in 2019 to an outside vendor. Morgan Stanley later recovered the servers, court papers show.

Morgan Stanley said in an email on Monday it had notified all customers who may have been affected and was pleased to settle the lawsuit.

In October 2020, Morgan Stanley agreed to pay a $60 million civil fine to resolve U.S. Office of the Comptroller of the Currency accusations concerning the incidents, including that its information security practices were unsafe or unsound.

The case is In re Morgan Stanley Data Security Litigation, U.S. District Court, Southern District of New York, No. 20-05914.

(Reporting by Jonathan Stempel in New York; editing by Daniel Wallis and Jason Neely)