09-18-20
OCIE Warns Against Emerging Cyber Threat of “Credential Stuffing”
On September 15, 2020, the Office of Compliance Inspections and Examinations (“OCIE”) issued an alert urging investment advisers and broker-dealers to review their customer account protection safeguards and identity theft prevention programs. The impetus behind the alert is an increase in the number of cyber-attacks using a tactic called “credential stuffing,” observed during recent examinations. OCIE also disclosed a number of practices firms are using to mitigate this emergent risk.