SEC Alert! The Securities and Exchange Commission today separately charged J.P. Morgan Securities LLC, UBS Financial Services Inc., and TradeStation Securities, Inc. for deficiencies in their programs to prevent customer identity theft.

Source: https://www.sec.gov/news/press-release/2022-131

JPMorgan: The JPMorgan order also finds that the firm failed to exercise appropriate and effective oversight of all service provider arrangements and failed to train staff to effectively implement one of its identify theft prevention programs in 2017.
UBS: The UBS order also finds that the firm failed to periodically review new or existing types of customer accounts to determine whether and how its identity theft prevention program should apply to them; failed to adequately involve the board of directors in the oversight, development, implementation, and administration of the program; and failed to train its employees to effectively implement the program.
TradeStation: The TradeStation order also finds that the firm failed to adequately involve its board of directors in the oversight, development, implementation, and administration of its identity theft prevention program and failed to exercise appropriate and effective oversight of service provider arrangements.
The SECโ€™s orders find that each firm violated Rule 201 of Regulation S-ID. Without admitting or denying the SECโ€™s findings, each firm agreed to cease and desist from future violations of the charged provision, to be censured, and to pay the following penalties: JPMorgan: $1.2 million, UBS: $925,000, and TradeStation: $425,000.

Reddit Post