Comment Re:Google for it.. (Score 1) 111
I think I was one of the first to publically report an Ameritrade unique email address getting hit, though not the first. FWIW, I got hit again very late last year or early this year, on a new/different Ameritrade account with yet another unique email address. I called Ameritrade this time and spoke with someone in their security department. I explained everything and very strongly urged them to investigate things on their end. I'm sure others did the same thing, and I'm sure others were both happy and sad to hear the recent news. Happy for obvious reasons, sad for it taking so frigging long. After the second event, over a year after the first one, I played it safe and as soon as possible ended my relationship with them. It is highly unlikely I'll ever open an account with them again.
I can understand it taking some time to track down and eliminate an exploit. Not many, many months though... let alone years. IMO, Ameritrade should have been the FIRST to know about the problem, for they should have seeded their database with spamtrap addresses.