Morgan Stanley has reported a data breach after attackers stole personal information belonging to its customers by hacking into the Accellion FTA server of a third-party vendor. The stolen files were stored in encrypted form on the compromised server, but the threat actors also obtained the decryption key during the attack. Morgan Stanley says that the documents stolen during this incident contained:..Stock plan participants’ names, addresses (last known address) and social security numbers. The company added that the files stolen from Guidehouse’s FTA server did not contain passwords information or credentials that could be used to access impacted Morgan Stanley customers’ financial accounts.
Source: https://www.bleepingcomputer.com/news/security/morgan-stanley-reports-data-breach-after-vendor-accellion-hack/