Scottrade admits server snafu blabbed 20,000 customer files to world

Online brokerage Scottrade has admitted sensitive loan applications from roughly 20,000 customers were exposed to the world by a fumble-fingered third-party supplier. The cockup occurred when IT services biz Genpact uploaded the sensitive information to an Amazon-hosted server and didn't lock the box down – allowing its …

[Christoph]

"Vickery said account passwords were stored in plain text"

Helloooo! This is 2017! Wakey wakey!

[J. Cook]

I start a four day weekend in two hours.

Mmm.... Eggs and baccy. *drools*

Yeah, that was definately a RGE* or a CLM**.

* Resume Generating Event

** Career Limiting Move

[Anonymous Coward]

Re: I start a four day weekend in two hours.

Eggs and baccy?

Im assuming thats a Belgian "Adinkerke" special breakfast. Something you'd consume before a hard day at Plopsaland.

[Korev]

Re: I start a four day weekend in two hours.

More salt in that than there was in their passwords...

[Ian Michael Gumby]

No security.

SQLServer DB , plaintext and it looks like no or little security.

They should be hit with massive fines because of lax security. Note: They moved PII data in to the cloud which exposes them to more risk. Had the unsecured server been behind their firewalls, less risk of damage.

If I were a Scottrade customer, I'd start a class action lawsuit.

Yes its 2017... no excuse.

[Anonymous Coward]

"xposed to the world by a fumble-fingered third-party supplier."

No matter how good Cloud security is, this type of clusterfuck will always exist as a risk. Bet they don't talk about that much in sales pitches to corp execs. That's why its better to exclude in-house IT from these off-sites!!!

[Potemkine]

Culture of accountability

Genpact: key offices in New York City, but headquarters in Hamilton, Bermuda. Also among the “Top 25 Best Companies to Work For”... in India.

It tells a lot about what Genpact is.

[Anonymous Coward]

they never learn

Seems to be all too common. I have friends who work at one of the UK's largest stockbroking firms said they keep all customer data in plain text including passwords, phone, address, bank details. Just another Talktalk waiting to happen ...

[Anonymous Coward]

Since when did 'contacted' become 'reached out'?

Reaching out is something you do when the piccalilli is not within an optimal arc of the breadboard.