A Morgan Stanley staffer accidentally emailed an internal deal list revealing more than 100 investment-banking transactions the firm was pitching or monitoring, primarily across Asia but also including entries for Europe, the Middle East and Africa. The list named IPO candidates spanning China, South Korea and India, noted private-equity and pension-fund backers and flagged some projects as put on hold. The message was later retracted by the sender and a blurred copy surfaced on Instagram, prompting a Morgan Stanley statement saying the firm treats client confidentiality extremely seriously, promptly acted to address the inadvertent sharing and is engaging relevant parties.
The slip-up is an embarrassing breach for a bank long ranked among the top underwriters of Hong Kong listings and Asia mergers, and it underscores how sensitive pipeline information is for investment-banking teams. It remains unclear whether affected clients have contacted the firm. The episode joins a string of recent data mishaps at other financial firms - from compromised employee mailboxes to massive document exposures and regulatory fines - demonstrating that such leaks can lead to enforcement actions, reputational damage and erosion of client trust.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
China has implemented new travel regulations that are causing concern among technology companies and professionals. These rules are impacting the movement of talent and the operations of tech giants within the country. (dw.com)
OSCE's ODIHR organization will now consider reports of alleged election fraud in Sweden for future assessments. Several criminal investigations into suspected vote-rigging and vote-buying have been launched after the recent election, along with a surge in election result appeals. (tv4.se)
A Reddit moderator was ordered to pay Nintendo $4.5 million for operating Switch piracy shops. Nintendo accused James 'archbox' Williams of running illegal stores selling pirated Switch games. (theverge.com)
Nearly half of 4,688 small-business websites in a 2026 study did not implement any of seven key security headers. The study highlights widespread gaps in web security practices among small local businesses. (rackcrunch.com)
The Cutting Room Floor wiki was taken offline after a DDoS attack allegedly triggered by an banned AI user using Claude Code. The user reportedly evaded a ban, provoked anti-AI content, and sent abuse reports to the hosting provider. (kotaku.com)
A vulnerability in ansi2html.py allowed attackers to inject malicious scripts into build logs on builds.sr.ht, leading to account takeovers through XSS exploits. The flaw was wormable, affecting viewers of compromised logs and highlighting security risks in CI platforms. (blog.arusekk.pl)
Today's best Hacker News stories, summarized and screenshotted, one email a day.