(Bloomberg) --BlackRock Inc., the world’s largest asset manager, inadvertently posted confidential information about thousands of financial adviser clients on its website.
The data appeared in three spreadsheets, linked on one of the New York-based company’s web pages dedicated to its iShares exchange-traded funds. The documents included names and email addresses of financial advisers who buy BlackRock’s ETFs on behalf of customers. They also appeared to show the assets under management each adviser had in the firm’s iShares ETFs.
The links were dated Dec. 5, 2018, but it’s unclear how long they were public. The documents were seen by Bloomberg and removed Friday. BlackRock, which oversees assets of almost $6 trillion, is the world’s largest issuer of ETFs.
One of the spreadsheets appears to list more than 12,000 entries of advisers and their sales representatives at BlackRock. On another, the advisers were categorized in a variety of ways such as “dabblers” or “power users.” A column noted their “Club Level” including the “Patriots Club” or “Directors Club.”
Pledging Review
“We are conducting a full review of the matter,” spokesman Brian Beades said in a statement Friday. “The inadvertent and temporary posting of the information relates to two distribution partners serving independent advisers and does not include any of their underlying client information.”
Securing data is known to keep Wall Street leaders awake at night. But most often, senior executives cite a fear of hackers, which has prompted some of the nation’s biggest banks to pour upwards of $1 billion a year into cybersecurity. It’s one area where financial firms set aside bitter rivalries, sharing tips and collaborating on projects to ensure the public remains confident in the industry -- and that it never suffers a catastrophic loss.
But even data breaches that don’t expose client assets risk reputational harm.
In 2014, JPMorgan Chase & Co. suffered one of the industry’s largest losses of information, estimating at the time that hackers had accessed contact information on more than 80 million clients. Chief Executive Officer Jamie Dimon vowed to increase the bank’s security budget and embarked on a hiring spree to build out those operations for what he called “a permanent battle.” He has repeatedly updated investors on those efforts in annual letters.
Firms can’t avoid breaches entirely, but they can react to them in a way that rebuilds trust, said John Reed Stark, who focused on internet crimes while working in the Securities and Exchange Commission’s enforcement division and now runs a cybersecurity consulting business.
“Data security incidents are inevitable,” he said after the incident at BlackRock. “The most important thing in this kind of situation is about the response from the firm, and whether they’re communicating accurately about what happened.”
To contact the reporter on this story: Annie Massa in New York at [email protected] To contact the editors responsible for this story: Margaret Collins at [email protected] David Scheer, Josh Friedman
Take a look at our comprehensive guide to the best and most popular information ebooks and products available today on Detoxing, Colon Cleansing, Weight Loss and Dating and Romance. They are all in one spot, easy to find and compere to make a quick selection for the product that best fits your needs or wants.
So browse through a category and make your preferred selection and come back here to read more choice articles and get a few more helpful tips on ways to help your enhancement.
As an Amazon Associate I earn from qualifying purchases. “saubiosaubiosuccess.com is a participant in third party affiliate and advertising programs; The Amazon Services LLC Associates Program, Awin network, and other affiliate advertising programs are designed to provide a means for sites to earn advertising fees and commissions by advertising and linking to products on other sites and on Amazon.com. Amazon and the Amazon logo are trademarks of Amazon.com, Inc, or its affiliates.”
We use anonymous cookies and various 3rd-party services to optimise and to offer you a better, more personalised, browsing experience with advanced accessibility enhancements.
Dismiss
Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
