Cybersecurity: Safeguarding Client Accounts against Credential Compromise

The SEC Office of Compliance Inspections and Examinations has issued a Risk Alert highlighting the threat of “credential stuffing” – the use of login credentials illegally obtained elsewhere, leveraging the possibility that the same combination will work on another system where the person has an account.