According to FINRA, Wells Fargo Clearing Services, LLC was censured and fined $150,000 for failing to establish and maintain adequate supervisory systems to safeguard customer information.

The St. Louis, Missouri firm had a process to notify insurance carriers when registered representatives left the firm so that the carriers would remove the former representatives' access to customer variable annuity accounts. However, the firm only provided notice for representatives categorized as "producing" (those who sold products to customers) and not for "non-producing" representatives.

The problem arose because the firm miscategorized certain producing representatives as non-producing in its internal system. When these representatives departed, insurance carriers were not notified. As a result, former representatives continued to have access to firm customers' variable annuity accounts on carrier portals.

The information accessible included customers' names, addresses, account numbers, account balances, and in at least some instances, other nonpublic personal information such as dates of birth and social security numbers.

This type of continued access creates risks that former employees could misuse customer information for identity theft, unauthorized account access, or improper solicitation.

The firm has since notified the carriers of the formerly omitted representatives and modified its procedures to require notification for all departing representatives regardless of their producing or non-producing status.

For investors, this case highlights the importance of data security even after a representative leaves a firm. If you have variable annuities and your representative has left their firm, consider checking with the insurance carrier to confirm that only authorized individuals have access to your account information.