UPDATE June 2023:
We have confirmed that in association with the prior data breach disclosed by Zacks below, which relates to a smaller subset of customers whose unencrypted passwords were compromised, the unauthorized third parties also gained access to encrypted passwords of zacks.com customers. We have no reason to believe any customer credit card information or any other customer financial information was accessed for any Zacks customer at any time. We have recommended that customers change their zacks.com passwords, as well as the password for all other online accounts for which they use the same e-mail address and password, and monitor financial accounts and consumer credit reports, although again, no financial information has been compromised. Zacks is also taking steps now to further enhance password security. We regret any inconvenience to our customers and we remain vigilant in protecting your personal information.
Important Notification
Dear Zacks Members and Visitors:
On December 28, 2022, our team identified that an unknown third-party gained unauthorized access to certain customer records and we took immediate action to implement additional security measures to our network, and to investigate and understand the scope of the incident. While the customer information at issue is limited, and we have no indication that the accessed information has been used inappropriately, we seek to be transparent with you, our customers, and the public generally.
The specific customer information we believe to have been accessed is limited to name, address, phone number and email address/user name, as well as passwords used from an older database of customers who had signed up for the Zacks Elite product between November 1999 through February 2005. This product was phased out by 2011. One of the immediate steps we took was to require the resetting of the passwords from that older database. Password data for current products is encrypted. We have no indication or reason to believe that any credit card or other financial information was accessed, or that any other customer personal information was accessed.
We take this event seriously. We have already implemented additional security measures to our network, and the password reset process so that customer accounts from the Zacks Elite database cannot be accessed with the compromised password. Also, while we constantly monitor and update our system to safeguard customer information, including in consultation with our outside cybersecurity experts, as a result of this incident, we are conducting an investigation and continuing our ongoing efforts to evaluate and implement additional measures to further enhance our protocols for the protection of customer information.
We regret this incident and apologize for any concern it may cause any of our customers. Unfortunately, this type of criminal activity has become commonplace in our cyber society. As a matter of course, we urge you to regularly change and update your passwords for zacks.com and other online accounts, and that you monitor financial accounts and consumer credit reports. For our part, we will continue to be vigilant in our protection of customer information by strengthening and enhancing our cybersecurity efforts.
If you have any further questions regarding this incident, please call our toll-free response line that we have set up to respond to questions at 1-855-813-3507, Monday-Friday, between 9:00 a.m. and 5:00 p.m. Central time.
Sincere regards,
Zacks Investment Research