A mass spear phishing attack could await victims of the recently publicized data breach at discount online broker TD Ameritrade, security experts said this week.