The prominent investment research house notified clients that an external web utility platform managed by a downstream commercial vendor suffered a data intrusion. The breach exposed a localized directory of subscriber profile names, corporate email addresses, and encrypted access strings.