2007 D.A. Davidson — 192K customer records
Data compromised
Names, Social Security numbers, account numbers, addresses, dates of birth
Technical writeup
Hackers used SQL injection on December 25-26, 2007. FINRA fined D.A. Davidson $375,000 in 2010 for failing to encrypt the customer database.
Root cause
SQL injection attack by Latvian hackers