Slashdot Mirror


Deleting Emails Costs Morgan Stanley $1.45B

DoubleWhopper writes "The financial giant Morgan Stanley lost a $1.45 billion judgement yesterday due, in part, to their failure to retain old email. The judge in the case, 'frustrated at Morgan Stanley's repeated failure to provide [the plaintiff's] attorneys with e-mails, handed down a pretrial ruling that effectively found the bank had conspired to defraud' their former client. The CEO of a record retention software company noted, 'Morgan Stanley is going to be a harbinger'."

20 of 312 comments (clear)

  1. Oh crap! by TripMaster+Monkey · · Score: 5, Funny

    From TFS:

    The financial giant Morgan Stanley lost a $1.45 billion judgement yesterday due, in part, to their failure to retain old email.


    I'd sure hate to be the system administrator who dropped the ball there...

    "What do you mean we don't have them archived??? You just cost us 1.45 billion dollars!"
    "Don't worry though...you can pay it back....we'll just dock your paychecks by...say...$1000 per pay period. At that rate you can have it all paid back in a little over 55,769 YEARS!!!

    ^_^

    --
    ____

    ~ |rip/\/\aster /\/\onkey

    1. Re:Oh crap! by TheNumberSix · · Score: 5, Informative

      I freely admit I haven't RTFA, but I read some excellent coverage of this story on wsj.com.

      Apparently, Morgan Stanley came forward, said they had produced all the emails. (time passes) They find some more emails and turn them over. (time passes) The find a closet stuffed with backup tapes and turn them over. (Time passes) Morgan Stanley files a document certifying that they turned everything over. (Time passes) Morgan finds even more emails and turns them over. This causes the judge to get annoyed.

      One of the earlier problems was that Morgan had built a database to house old emails and the first time they were told to turnover emails, a sysadmin who was not in a clueful state just searched the database without finding out how much had already been imported into the DB. (Turned out the DB had only had a small percentage of old emails put into it.)

      --
      Never confuse feeling with thinking.
    2. Re:Oh crap! by mrbooze · · Score: 4, Interesting

      Almost certainly it was a corporate policy. My own company has had the lawyers pushing for a couple years no to have mandatory email deletion after only a few weeks, and the previous company did the same. Literally, no exceptions, they were going to force IT to auto-delete anything based on age, and the policy was going to be that if people needed to keep an email they should print it out and file it.

      That pressure from the lawyers stopped not too long ago. I guess we have SOX to thank for that.

  2. Not really the best use of the "YRO" category by Rude+Turnip · · Score: 5, Insightful

    Big investment firms like Morgan Stanley are obligated by law to retain lots of records. This is more of an "Almighty Buck" type of story, IMO.

    1. Re:Not really the best use of the "YRO" category by whoever57 · · Score: 4, Informative
      Leaving aside your apparent confusion between emails and financial records, from TFA:
      Banks and broker-dealers are obliged to retain e-mail and instant messaging documents for three years under U.S. Securities and Exchange Commission rules. But similar requirements will apply to all public companies from July 2006 under the Sarbanes-Oxley corporate reform measures.
      This document discusses email archiving requirements, including an EU-wide requirement for ISPs to keep copies of emails for 1 year.
      --
      The real "Libtards" are the Libertarians!
  3. I know how they feel by COMON$ · · Score: 5, Funny

    I deleted an e-mail that gave me $10 off at tigerdirect...dont think I will ever recover.

    --
    CS: It is all sink or swim...oh and did I mention there are sharks in that water?
  4. Deleting Emails Costs Morgan Stanley $1.45B by Anonymous Coward · · Score: 5, Funny

    Wow. I can delete mine for free.

  5. Email retention Policy. by TedTschopp · · Score: 4, Interesting

    I know that where I work there is a basic 6 month email retention policy, which states that all email will be deleted if it is 6 months old. I have always wondered if and when this will change.

    There is probably an opportunity here for a company to come up with an extension to an email system which will manage keeping old emails. Something which will allow for the catagorizing of unstructured data. That way the system can trash the not to serious emails and keep the 'important' ones.

    Ted Tschopp

    --
    Fantasy remains a human right; we make in our measure and in our derivative mode... -- JRR Tolkien
    1. Re:Email retention Policy. by Valegor · · Score: 4, Informative

      EMC and Veritas have both bought companies(Legato and KVS) that provide not only this type of service, but also single instance storage. If someone sends out an attachement to 50 people, only one is actually put into storage. There are other vendors that have similar products, but these are the only two I have first hand knowledge of. The best practice if you are not legally required to keep e-mail(as financial institutions are by SEC requirements) seems to be a short retention policy. If you do not keep the e-mail then it cannot be used against you. It is also best to enforce the policy because if it is discovered that you have the e-mail then you are required to produce it. Financial industries however are required to keep all electronic communications for atleast 3 years, but that extrends to 7 if the data in question is in litigation.

    2. Re:Email retention Policy. by darkmeridian · · Score: 4, Informative

      The Sarbanes-Oxley Act requires all public companies to maintain records for three years. Six months is a problem. What happened to Morgan Stanley, however, is not simply that it failed to keep the records. Rather, it kept on saying that it could not find the files. There is a rather reasonable rule of evidence that says failure to produce evidence in your possession without a reasonable excuse for that failure (like there was a non-suspicious fire, or 9/11) can lead to the presumption that that evidence would have vindicated the position of the opposing party. For instance, pretend a supermarket has a security camera that I claim recorded the store clerk beating me. I want the tape to prove the unprovoked attack. If the store says it lost the tape and the judge believes that this was a pretext for destroying evidence, he may make a pre-trial ruling that the tape would show an unprovoked attack against me by the clerk.

      --
      A NYC lawyer blogs. http://www.chuangblog.com/
  6. Sarbaines Oxley by Mentaljock · · Score: 5, Interesting

    (I work at a Bank) Since Sarbaines kicked in, we have to keep a backup of every single file you use for work purposes, not just email. This means archiving every word doc, spreadsheet, database...etc. Starting January 1, they also blocked our access to all external sources of email and external instant messaging clients as well. After seeing this judgement, now I understand why.

  7. They deleted MY emails! by richardmilhousnixon · · Score: 5, Funny

    I was a client of MS/DW. I kept trying to let my financial advisor know about this wonderful pill that would make his penis bigger, and I get the feeling that MY emails were deleted as well!

    --
    -- sometimes AND gates turn me on.
  8. Selective Memory Loss by SoupIsGood+Food · · Score: 5, Insightful

    I think the issue is "selective memory loss" - Microsoft plays this card all the time in court. Emails from a relevant time period are "deleted" when convenient, while older or newer or even contemporaneous mail is saved... the judge in this case was simply smart enough to call shenanigans.

    You can delete old email if you're that hard up for space, just have a rock-solid deletion policy you can prove you adhered to in a court of law.

    It also helps to audit your archives and backups regularly, and document what data was lost when. 'Cuz face it, every admin at some point or other loses some data to corruption, hardware failure, bookeeping mixups or user error. Knowing what you forgot and when you forgot it can help in situations where not having the data on hand can cost a billion bucks or so.

    SoupIsGood Food

  9. Idiot by pyite69 · · Score: 5, Insightful

    where are my moderator points when I need them.

    Most companies purposefully choose short retention policies, in an attempt to avoid these kinds of settlements... it isn't a sysadmin's fault.

    The theory was that this would let them discard old emails without having it be intentional obstruction of justice. I guess that theory will be out the window now.

  10. Yes, but when the madmen are running the asylum... by shanen · · Score: 5, Interesting
    What actually strikes me as interesting about this is the battle for control of reality and truth. As you noted, many companies want to delete email quickly, but you ignore the question of why. If they are only doing good and honest things, then (you would think) they should be delighted to be able to conclusively prove their innocence. Yet they want to delete the email?

    Aha! Maybe they aren't so innocent, and the email tends to reveal their real intentions and actions.

    Point one: You can't make a lot of money by being completely and absolutely honest. Just how much a "lot" means is subject to debate. The original quote was $1 million, if I recall correctly, but that isn't so much money these days, so I think it would sound better with $1 billion.

    Point two: I don't really blame them for going along with the modern trend. Look at the political leaders we have these days--and their popular support. I think Cheney is the No.1 poster child for corporate corruption. A few years of government "service", then he goes to Haliburton and rakes in the big bucks, then goes back to politics and starts an unnecessary war that "purely coincidentally" throws billions of dollars back to his old company--which is STILL paying him deferred compensation. However, he'll be back in business before the government has to try and pay the piper. If he lives so long, I'll have to count it as evidence against the existence of a just God. I really think a just God would have thoroughly smitten Cheney a good while ago.

    You'll note that BushCo is also very eager to control their little secrets, and I'd bet they'd be delighted to erase all of their email, too. The next interesting question is whether or not they can do it, given the state of modern technology. How can they make sure someone hasn't burned a CD that contains the truth?

    --
    Freedom = (Meaningful - Coerced) Choice != (Speech | Beer^2), and sad sock puppets' bad mods avail them naught.
  11. Good....FINALLY! by PortHaven · · Score: 5, Insightful

    Think about it...

    If it can cost Morgan-Stanley $1.5 billion for not storing email. And 90% of email is SPAM. The risk of deleting/filtering SPAM and losing valid email is going to be too risky.

    Therefore, it will become extremely cost effective for Morgan-Stanley (and other large firms) to hire lobbyists to make unsolicited SPAM (with no valid return email addresses) illegal, criminal, and enforced.

  12. Re:Yes, but when the madmen are running the asylum by jskiff · · Score: 4, Informative

    I think Cheney is the No.1 poster child for corporate corruption. A few years of government "service", then he goes to Haliburton and rakes in the big bucks, then goes back to politics and starts an unnecessary war that "purely coincidentally" throws billions of dollars back to his old company--which is STILL paying him deferred compensation.

    I hate to defend Dick Cheney, but saying he only has a few years of government service under his belt is flat-out false.

    ==
    His career in public service began in 1969 when he joined the Nixon Administration, serving in a number of positions at the Cost of Living Council, at the Office of Economic Opportunity, and within the White House.

    When Gerald Ford assumed the Presidency in August 1974, Mr. Cheney served on the transition team and later as Deputy Assistant to the President. In November 1975, he was named Assistant to the President and White House Chief of Staff, a position he held throughout the remainder of the Ford Administration.

    After he returned to his home state of Wyoming in 1977, Mr. Cheney was elected to serve as the state's sole Congressman in the U.S. House of Representatives. He was re-elected five times and elected by his colleagues to serve as Chairman of the Republican Policy Committee from 1981 to 1987. He was elected Chairman of the House Republican Conference in 1987 and elected House Minority Whip in 1988.
    ==

    From Whitehouse.gov

    --
    It's "no one," not "noone." Who the hell is noone anyway?
  13. Re:IANAL - Someone help me understand this. by jbolden · · Score: 4, Interesting

    Lots of other things considered "hard evidence" don't meet those standards either. The threee big standards for rejecting evidence are:

    irrelevant,
    immaterial
    violates rules against "hearsay"

    Judges and courts are fine dealing with information that may or may not be true. They are set up to evaluate those sorts of things.

  14. Re:Time Study Analysis on the Cubicle Slaves by fbjon · · Score: 4, Informative
    You're almost right, but off by 11 years. Finland in 1994: 16,6%; in 2004: 8,8%.

    And hey, at least we don't burn out like a lightbulb after a few years.

    --
    True confidence comes not from realising you are as good as your peers, but that your peers are as bad as you are.
  15. Re:i don't get it by gkuz · · Score: 4, Informative
    email can be faked or altered so easily

    Actually, I've come to the opposite conclusion. I don't know every e-mail system, and I don't know what Morgan Stanley was using, but I have administered serious e-mail systems for about 15 years, and I can tell you that in many, it is in fact very difficult to insert a fake message into the message store in the right place, with the right semantic context. Don't forget that in all these cases the recovery is from (presumably) dated and logged backup tapes, possibly under the observation of opposing counsel's expert, and under penalty of perjury. So go ahead, tell me how you insert (or even alter) a message into a multi-gigabyte message store coming off a tape that's been archived and logged at Iron Mountain for the last five years. Will it have the right SMTP transit headers? The correct "In-Reply-To:"? What about the context of the message? Are you replying to someone? Do they later reply to you? Does it all fit together? This is a distinctly non-trivial exercise. Possible, yes, but maybe only theoretically so. And the grunt doing the recovery is *very unlikely* to want to risk going to jail to cover up some fraud he was probably never associated with.