According to FINRA, Minh Duc Vo was assessed a deferred fine of $7,500 and suspended from association with any FINRA member in all capacities for four months for engaging in an undisclosed outside business activity, making false statements about it, and misappropriating confidential customer information.

Vo engaged in an outside business activity by accepting an agent appointment with, and receiving compensation from, an outside insurance company without providing prior written notice to his firm. He sold a fixed indexed annuity offered by the insurance company to a longtime firm customer even though the insurer was not a firm-approved carrier. Vo received a commission from the insurance company for the sale.

When his firm discovered the sale and began an internal review, Vo made the situation worse by lying about it. He falsely stated that he did not sell the policy, denying the very conduct the firm was investigating. Vo also made false statements regarding his participation in the outside business activity in his compliance questionnaire, actively concealing his misconduct rather than disclosing it.

The violations escalated significantly when Vo learned he would be terminated from the firm. He downloaded non-public customer information for every customer of his firm branch office into a spreadsheet and emailed it to his personal email account. The spreadsheet contained customers' names, account numbers, and other non-public account details provided to the firm in confidence. This included information about individuals who were not even Vo's own customers.

Vo retained this confidential information after his termination, violating the firm's policies and doing so without the customers' knowledge or consent. His actions caused the firm to violate SEC Regulation S-P (Privacy of Consumer Financial Information), which requires firms to protect the security and confidentiality of customer information.

Misappropriating customer information is a serious violation because it exposes customers to risks of identity theft, fraud, and unwanted solicitations. Representatives who take customer information when leaving a firm typically intend to solicit those customers to move their accounts to the representative's new firm. This deprives the original firm of the opportunity to serve those customers and occurs without customer consent.

The combination of violations—undisclosed outside business activity, lying to the firm about it, lying on compliance questionnaires, and stealing confidential customer information—demonstrates a pattern of dishonesty and disregard for customer privacy and firm policies.

The four-month suspension and $7,500 deferred fine reflect the multiple serious violations. Investors should be concerned about representatives who have misappropriated customer information, as this indicates willingness to violate customer privacy and firm policies for personal benefit.