An attack on the Financial Security Institute’s ongoing assessment system exposed about 130 files submitted by 48 financial companies on November 9. The exposed material included about 200 administrative forms, roughly 300 pieces of personal information such as names and birth dates, and about 350 system-user records.
The institute notified the related financial companies on November 10. The breach has drawn scrutiny because a 2022 Financial Services Commission audit had already warned that the system could allow information leakage.