Stockbroking firm fined £77,000 for weak data security controls

The FSA has fined Merchant Securities Group Limited for not adequately protecting its customers from the risk of identity fraud. This is the first time the FSA has fined a stockbroking firm for weak data security controls.

Merchant Securities had inadequate procedures for verifying the identities of customers that contacted the firm by telephone. Instead, the firm relied on being able to recognise customers' voices and talking with them informally about personal matters such as holidays or hobbies. Personal account numbers which could be used, with a customer's name, to access account information were included in routine letters.

The FSA said this exposed customers to Identity Theft. Fine: £77,000.