Firm that lost $6.6M client funds in cyber incidents settles charges with SEC

Firm that lost $6.6M client funds in cyber incidents settles charges with SEC
Clients were reimbursed despite only partial recovery of the lost funds.
AUG 21, 2024

A firm that lost millions of dollars of client funds in two separate cyber incidents is to pay $850,000 and agree to a cease-and-desist order and censure, to settle charges with the Securities and Exchange Commission.

New York-based registered transfer agent Equiniti Trust Company LLC, formerly known as American Stock Transfer & Trust Company LLC, was charged by the SEC for failing to protect investors’ funds from theft or misuse.

The charges relate to two incidents, in 2022 and 2023, where cyber intrusions led to the loss of a combined $6.6. million in client funds.

The first involved the hijack of an email chain between the firm and a US-based public-issuer client. The unknown threat actor involved posed as an employee of the issuer and instructed American Stock Transfer to issue millions of new shares of the issuer, liquidate those shares, and send the proceeds to an overseas bank.

The second involved Social Security numbers stolen from American Stock Transfer clients that were used to create fake accounts that were automatically linked to genuine client accounts despite mismatched names and other information. This enabled the fraudster to liquidate securities held in the genuine accounts and transfer funds to external bank accounts.

“American Stock Transfer failed to provide the safeguards necessary to protect its clients’ funds and securities from the types of cyber intrusions that have become a near-constant threat to companies and the markets,” said Monique C. Winkler, Director of the SEC’s San Francisco Regional Office. “As threat actors become more sophisticated in the cyber space, transfer agents must act to implement and maintain effective safeguards and procedures around client assets.”

American Stock Transfer managed to recover approximately $2.6 million of the lost funds and all clients were fully reimbursed.

The SEC’s order finds that Equiniti violated Section 17A(d) of the Securities Exchange Act of 1934 and Rule 17Ad-12 thereunder.

Latest News

Buy or sell Canada? Wealth managers watch carefully as Canadians head to the polls
Buy or sell Canada? Wealth managers watch carefully as Canadians head to the polls

Canadian stocks are on a roll in 2025 as the country prepares to name a new Prime Minister.

How are tech-boosted advisors spending their "time tax refund"?
How are tech-boosted advisors spending their "time tax refund"?

Two C-level leaders reveal the new time-saving tools they've implemented and what advisors are doing with their newly freed-up hours.

Indivisible Partners selects DPL to arm advisors for insurance business
Indivisible Partners selects DPL to arm advisors for insurance business

The RIA led by Merrill Lynch veteran John Thiel is helping its advisors take part in the growing trend toward fee-based annuities.

RIA M&A stays brisk in first quarter with record pace of dealmaking
RIA M&A stays brisk in first quarter with record pace of dealmaking

Driven by robust transaction activity amid market turbulence and increased focus on billion-dollar plus targets, Echelon Partners expects another all-time high in 2025.

New York Dems push for return of tax on stock sales
New York Dems push for return of tax on stock sales

The looming threat of federal funding cuts to state and local governments has lawmakers weighing a levy that was phased out in 1981.

SPONSORED Compliance in real time: Technology's expanding role in RIA oversight

RIAs face rising regulatory pressure in 2025. Forward-looking firms are responding with embedded technology, not more paperwork.

SPONSORED Advisory firms confront crossroads amid historic wealth transfer

As inheritances are set to reshape client portfolios and next-gen heirs demand digital-first experiences, firms are retooling their wealth tech stacks and succession models in real time.