Firm agrees to pay $300k over cybersecurity slipups

The email account takeovers resulted in the exposure of Cetera Entities’ customers’ PII stored in the compromised email accounts. None of the compromised email accounts had multi-factor authentication turned on