Washington State Department of Financial Institutions

Consumer Alert

NASAA Warns Online Investors to Beware of Hack Attacks

October 26, 2006

WASHINGTON – The North American Securities Administrators Association today warned investors to carefully monitor their online trading accounts in the wake of “hack attacks” in which predators have broken into customer accounts at online brokerages in the United States and Canada and made unauthorized trades worth millions of dollars.

“The number of these attacks on investors continues to rise as identity thieves increasingly target the securities industry,” said Joseph P. Borg, NASAA President and Director of the Alabama Securities Commission. “Investors need to carefully guard their financial information and continuously monitor their online brokerage records to ensure that they are not subject to this type of fraud.”

Federal and industry authorities are investigating recent cases in which hackers gained access to customer accounts at several large online brokers and used the customers’ funds to buy certain thinly traded microcap securities, also known as penny stocks. The hackers appeared to be running a “pump and dump” scheme, trying to drive up share prices so they could sell the stocks at a profit.

These scams typically begin with a hacker obtaining customer passwords and user names, then liquefying that person’s existing stock holding and using the proceeds to buy share in the microcap. They then wire the money to either an offshore account or through a series of straw men or dummy corporations.

“As investors become increasingly comfortable with the ease and sophistication of services offered by online brokerages, we want to make sure that they remember not to let their guard down when they boot up their computers,” Borg said. “If you believe that funds have been transferred out of your account, notify your financial professional, preferably in writing and notify your state or provincial securities regulator.”

In order to help consumers guard their online financial information from predators, NASAA recommends that they follow these tips:

Tips To Protect Yourself Online

For more information about online investing and how to protect yourself from fraud, visit the Investing Online Resource Center at http://www.investingonline.org, a project of NASAA, the oldest international organization devoted to investor protection. NASAA’s membership consists of the securities administrators in the 50 states, the District of Columbia, Puerto Rico, the U.S. Virgin Islands, the provinces and territories of Canada, and Mexico.