Skip to Primary Navigation

Skip to main content

M Holdings to pay $325K for cybersecurity lapses that compromised email accounts

Image of a computer screen saying "Recovery" facing windows.
Photo: Nathan Howard/Getty Images

Julie DiMauro

4 min read
 Click to share on Facebook (Opens in new window/tab) Click to share on Twitter (Opens in new window/tab) Click to share on LinkedIn (Opens in new window/tab) Click to share on WhatsApp (Opens in new window/tab)

The SEC said the firm did not maintain comprehensive information security policies despite being aware of significant gaps in protection.

M Holdings Securities has received a $325,000 penalty from the SEC for failing to maintain adequate cybersecurity safeguards for its network of member firms. This neglect violated the SEC’s Safeguards Rule (Reg S-P) and Identity Theft Red Flags Rule (Reg S-ID), according to the securities regulator.

A dually registered broker-dealer and

, , , , , , ,

Get full access, free for a month

This is a Premium article. Start your 28-day free trial to continue reading and access all content on GRIP – no payment details required.

Start free trial Sign in

What’s included:

  • Every new article, plus our 5,000+ archive
  • Daily regulatory insight and guidance
  • Exclusive interviews and in-depth analysis
  • Coverage of industry-leading events and conferences
  • All podcasts and videos, featuring industry experts
  • The full set of Rules Navigator tools
  • An ad-free experience