We understand your concern and frustration over the spam e-mail you?ve
received, and we want you to know that we take your privacy and security
seriously. We will continue to do all we can to protect both.

Our investigation into this issue is ongoing. We?ve recently expanded
the directions in which we?re investigating, and have doubled our
efforts in both internal and external investigations. We?re looking at
our own systems, and working closely with our vendors to examine theirs.

We continue to make progress and work very hard at investigating this
issue, but unfortunately we still don?t have an update we can share with
you at this time. We hope you understand that sharing details of exactly
what we have learned so far can compromise the ongoing investigation.

Please be sure to delete any spam you might receive, then empty your
e-mail?s trash so that it?s no longer kept there, either.

If you haven?t lately, you might want to review the Security Center
online, which has details about spam,  and also about the Asset
Protection Guarantee. It protects you if you lose cash or securities
from your account due to unauthorized activity. If that happens, we can
guarantee we?ll reimburse you if you work with us in three ways: 1) keep
your account information secure and confidential, 2) frequently check
your account and report any suspicious activity to us immediately, and
3) take steps we request if your account is ever compromised.

We understand that this issue is a nuisance and that it?s troubling. And
we thank you for your cooperation and patience as we get to the bottom
of it.