M Holdings to pay $325K for cybersecurity lapses that compromised email accounts

The SEC said the firm did not maintain comprehensive information security policies despite being aware of significant gaps in protection.

M Holdings Securities has received a $325,000 penalty from the SEC for failing to maintain adequate cybersecurity safeguards for its network of member firms. This neglect violated the SEC’s Safeguards Rule (Reg S-P) and Identity Theft Red Flags Rule (Reg S-ID), according to the securities regulator.

A dually registered broker-dealer and

Free Trial

Register for free to keep reading.

To continue reading this article and unlock full access to GRIP, register now. You’ll enjoy free access to all content until our subscription service launches in early 2026.

  • Unlimited access to industry insights
  • Stay on top of key rules and regulatory changes with our Rules Navigator
  • Ad-free experience with no distractions
  • Regular podcasts from trusted external experts
  • Fresh compliance and regulatory content every day
Register for free Already a member? Sign in