?

Log in

[icon] Ameritrade has a data security leak - Patti
View:Recent Entries.
View:Archive.
View:Friends.
View:Profile.
View:Website (pattib.org).

Security:
Subject:Ameritrade has a data security leak
Time:11:17 am
For years, I had an IRA with Bidwell.com, a small broker in Portland. I loved them, but a few years ago they sold out to Ameritrade. OK, I guess I have an Ameritrade account.

I always give out tagged email addresses for every site I use-- Amazon might be qz101@example.net, Ameritrade could be at219@example.net, etc. I can always tell whether mail is legitimate or not, and if I start getting spam at an email address I know precisely what site it came from.

A few months ago, I started getting spam at my Ameritrade email address-- sleazy pump & dump stuff, viagra, etc., clearly not sent by Ameritrade themselves. I notified Ameritrade and asked for an explanation, communicated with them for a bit, and changed my email address on the site to somethingelse@example.net.

I'm sure you can see what's coming. This week, somethingelse@example.net started getting pump & dump spam.

It's clear to me that there's a security issue at Ameritrade-- they've been hacked, an employee is selling email addresses, something. I don't know what, but it's clear that their data is leaking. I don't know if it's anything beyond email addresses or not, but I don't care.

Anyone have recommendations for a broker to move my IRA to?
comments: Leave a comment Previous Entry Share Next Entry


foomf
Link:(Link)
Time:2007-04-14 06:53 pm (UTC)
Before you go any further, I would say you need to point out to the SEC that their email is insecure. Or since you've spoken to them about it, tell them that you intend to do so.

Just as an act of love.

Because it explains why I am getting spam on an address that I never gave anyone.
(Reply) (Thread)


rjs
Link:(Link)
Time:2007-04-14 06:57 pm (UTC)
You're nicer than me. I'd go to a news outlet and have them report the story.
(Reply) (Parent) (Thread)


whipartist
Link:(Link)
Time:2007-04-14 07:03 pm (UTC)
I'm very seriously considering both the SEC and the press.

I just got a "we're sorry, we're continuing and expanding our investigation, please send us the email" mail.
(Reply) (Parent) (Thread)


wild_irises
Link:(Link)
Time:2007-04-14 07:00 pm (UTC)
abostick59 and I have done well with ScottTrade.
(Reply) (Thread)


adb_jaeger
Link:(Link)
Time:2007-04-14 07:54 pm (UTC)
I have my money at Fidelity. They have a pilot program (I'm beta testing) where you can get an RSA SecureID for your account. They grok security.

(Reply) (Thread)

(Deleted comment)

jnala
Link:(Link)
Time:2007-04-15 12:24 am (UTC)
I've been very happy with Vanguard for many years.
(Reply) (Thread)


evwhore
Link:(Link)
Time:2007-04-15 12:45 am (UTC)
Ditto Vanguard. I just xferred all my Schwab stuff to them earlier this year to consolidate all my crap under one roof.
(Reply) (Thread)


pdx_girl
Link:(Link)
Time:2007-04-15 02:54 am (UTC)
I've been pretty happy with Merrill Lynch, although it depends on your broker, I suppose. I used to have Bidwell and hate that they sold to Ameritrade. :(
(Reply) (Thread)


spicole
Subject:Let's light this candle
Link:(Link)
Time:2007-04-15 03:12 am (UTC)
I use Fidelity. My benefits and whatnot are managed there, so I have an individual account there as well. I really like the way the site works. I have access to a shitload of mutual funds, not just Fidelity funds, which aren't always that great, as patrissimo pointed out.
(Reply) (Thread)

(Anonymous)
Subject:TD Ameritrade email security problem
Link:(Link)
Time:2007-04-19 03:16 pm (UTC)
It happened to me too - AGAIN. This is the third time the email address I use only with TD Ameritrade just ended up on a penny stock spam list. Either they are selling them, or they have a serious security problem (most likely an inside job).

This can not be explained by a random email address spammer (as Ameritrade told me) because I have a catch-all account that would receive ALL variations sent to my domain name. But I do not get random variations. This stock spam specifically targets the address I gave to TD Ameritrade, and only TD Ameritrade.

Also, the last time I changed my email address, I created three variations (*_TD1*, *_TD2*, and *_TD3*). I gave one to TD, and the other two were control (i.e. I did not give them to anybody). And guess what? The one I gave to TD is getting stock spam, and the other two are not.

I don't know how else you can explain this other than private email addresses are leaking out of TD Ameritrade. And I am furious.
(Reply) (Thread)


whipartist
Subject:Re: TD Ameritrade email security problem
Link:(Link)
Time:2007-04-19 03:20 pm (UTC)
Not sure who you are, since you posted anonymously.
(Reply) (Parent) (Thread)

(Anonymous)
Subject:I too started getting spam when changed email at ameritrade
Link:(Link)
Time:2007-04-20 01:04 am (UTC)
I don't have 1 email address per site I register my email with, but I knew it was one of the few I gave my email address to... and now I know it's Ameritrade. I was going to email their customer service dept. but I think I'll just snail-mail their president, with a link to your web site. They can't afford bad PR.
(Reply) (Thread)


soulcookie
Link:(Link)
Time:2007-06-04 09:22 pm (UTC)
Boing Boing just posted an entry on this very topic.
(Reply) (Thread)


whipartist
Link:(Link)
Time:2007-06-04 09:53 pm (UTC)
Thanks!

I want to see those fuckers fry.
(Reply) (Parent) (Thread)

[icon] Ameritrade has a data security leak - Patti
View:Recent Entries.
View:Archive.
View:Friends.
View:Profile.
View:Website (pattib.org).