Scottrade Bank Bank Account Or Service Complaint

Scottrade Bank Bank account or service department,

Checking account Deposits and withdrawals California

Dear Sir/Madam, In 2013, I began a victim of identity theft and " account takeover '' events in relation to my Scottrade Bank account and Scottrade brokerage account. For identification purposes the number associated with those accounts was -. After becoming a victim of the identity theft and bearing the damages associated with the theft, which literally turned my life upside down, I took the opportunity to research and report numerous security flaws within the systems operated by Scottrade and their affiliates. Scottrade and their affiliates ignored my warnings and chose to retaliate against me for blowing the whistle and subsequently refused to honor their " Online Security Guarantee ''. The issue of Scottrade and their affiliates apologizing and returning the money that was stolen as a result of hacks as well as compensation for damages has been in dispute ever since.


) I am writing to Scottrade and their affiliates today to - additional insight into these events and better understand the risks of identity theft and how I can protect myself from further damages, specifically, I would request answers to the following questions:1. ) Does Scottrade or Scottrade Bank store personal information on computers owned and operated by Scottrade? 2. ) Which cyber forensics firm did Scottrade and/or their affiliates hire to investigate the breach? 3. ) What was the date of the first contact by law enforcement officials informing Scottrade of these attacks? 4. ) Was any of my personal account information, relating to account - exfiltrated in the breach? 5. ) Was any of my personal account information, relating to account - accessible by anybody internally or externally as a result of the vulnerabilities and and activities described in the press release referenced above? 6. ) Did Scottrade and their affiliates request permission from me to share my personal account information with a cybersecurity forensics firm? 7. ) What personal data is encrypted and what data is not encrypted? 8. ) Are Social Security Numbers encrypted at rest, in transit, and during use? 9. ) Are passwords encrypted at rest, in transit, and during use? 10. ) What encryption algorithm does Scottrade and their affiliates use for Social Security Numbers and/or passwords? 11. ) Scottrade collects data through a third party affiliate, which markets a product called " - '' which Scottrade markets as " multi-factor '' authentication, was the " - '' system at all compromised? 12. ) Is information stored within the " - '' system encrypted, at rest, during transit, and during use? 13. ) Does Scottrade and their affiliates have any plans to implement " out of band '' two factor authentication? 14. ) Has - confirmed 100 % that no encrypted passwords or Social Security Numbers were accessed, viewed, copied, changed, or exfiltrated. 15. ) Was any of my account information, relating to account - exfiltrated in the breach? Specifically, were account sessions stolen? Were account " cookies '' stolen? 16. ) Was any of my personal account information, relating to account - accessible by anybody internally or externally as a result of the vulnerabilities and and activities described in the press release referenced above? Specifically, were account sessions viewable? Were account " cookies '' viewable? My account is currently locked out, so I am unable to change the contact information