PHP Vulnerability Responses by Company

Charles Schwab & Co., Inc.

Companies / web services
Aliases / services
Charles Schwab / Schwab.com / Charles Schwab & Co., Inc.
Official website
https://www.schwab.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Schwab.com chat and email messages

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

A 2022 notice said certain Schwab.com chats and emails were inadvertently sent to external email systems between May 18 and December 16, 2021. Names, identification numbers or login information may have been involved. Schwab fixed the issue and reported no evidence of account intrusion or misuse.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Set up security alerts and two-step verification, review financial statements and credit reports, and report suspicious activity to the financial institution. Enrollment for the historical monitoring offer ended on June 8, 2022.

Official service URL

Source URLs

  1. Official operator evidencehttps://www.schwab.com/legal/schwab-brokerage-account-agreementService and operation documentation
  2. Official incident noticehttps://oag.ca.gov/system/files/ALC117684-00_6498368_T001DomesticSSN_DirectMail.pdfService and operation documentation
Related official sources
  1. Official operator evidenceOfficial information directoryIdentifies Charles Schwab & Co., Inc. and the relevant scope.
  2. Official incident noticeOfficial notice; link to this PHP incident unconfirmedIncident scope and guidance for affected people.

Comments