A trove of data belonging to Ameriprise Financial was found earlier this month that included Social Security numbers, decryption keys and confidential internal company documents. The breach is related to the use of a network attacked storage device that insecurely backed up data from an internal Ameripriset Financial network to an employee s home. The employee, who worked in a satellite office, was encouraged to securely back up data to an external location. A document on the vulnerable storage device appeared to be for surveying employees asking how they keep and maintain computer backups.
Source: https://threatpost.com/insecure-nas-device-exposes-350-ameriprise-investment-accounts/122588/