Skip to Primary Navigation

M Holdings to pay $325K for cybersecurity lapses that compromised email accounts

Image of a computer screen saying "Recovery" facing windows.
Photo: Nathan Howard/Getty Images

The SEC said the firm did not maintain comprehensive information security policies despite being aware of significant gaps in protection.

M Holdings Securities has received a $325,000 penalty from the SEC for failing to maintain adequate cybersecurity safeguards for its network of member firms. This neglect violated the SEC’s Safeguards Rule (Reg S-P) and Identity Theft Red Flags Rule (Reg S-ID), according to the securities regulator.

A dually registered broker-dealer and