Company: Zacks Investment Research
Exploit: Data Breach
Industry: Investment Research and Analysis
Sources: https://securityaffairs.com/141343/data-breach/zacks-investment-research-data-breach.html

Zacks Investment Research, a leading investment research firm, has confirmed a data breach affecting approximately 280,000 customers. The breach, which occurred at the end of 2022, involved unauthorized access to an older database of customers who signed up for the Zacks Elite product between November 1999 and February 2005. The company discovered the intrusion and promptly took action to implement additional security measures and investigate the extent of the breach.

According to Zacks, the exposed data may include a customer’s name, address, phone number, email address, and password used for Zacks.com. However, the company assures customers that no customer credit card information, financial information, or other personal information was accessed by the threat actors.

Zacks’ investigation into the breach is ongoing, and the company has reset the passwords for all compromised accounts. Zacks also encourages impacted customers to change their passwords for all online accounts where they used the same credentials as their Zacks account. Monitoring financial accounts and consumer credit reports is also recommended.

The company’s prompt response to the breach, as well as its commitment to protecting customer data, is commendable. However, the incident serves as a reminder to all companies and individuals to be vigilant in protecting personal information and to regularly monitor financial accounts and consumer credit reports.

In conclusion, Zacks Investment Research has confirmed a data breach affecting approximately 280,000 customers. The exposed data may include a customer’s name, address, phone number, email address, and password used for Zacks.com, but no financial information or other personal information was accessed. Zacks is actively investigating the breach and has implemented additional security measures to protect customer data. Customers are advised to change their passwords for all online accounts and to regularly monitor financial accounts and consumer credit reports.