A hacker has stolen data from seven million customers on the investment app Robinhood. Email addresses of five million people have been made public and the full names of another two million. No bank details or social security numbers were reported to have been leaked.
from research by Robinhood itself it turned out that in addition to the seven million customers, additional data has been leaked from a smaller group. Full names, dates of birth and zip codes were leaked on 310 people. More data has been leaked from about ten users, although Robinhood does not give any details about this. The company does indicate that no bank account numbers, debit card numbers or BSNs have been exposed. No one would have experienced financial distress as a result of the hack. The company says it is currently in the process of notifying the victims.
According to Robinhood, the hacker managed to manipulate a customer service representative to gain access to “certain customer service systems” and thus users’ data. The hacker would also demand a ransom from the investment app. The amount involved and whether the app has paid is not mentioned. Robinhood reports that it has stopped the attack and has informed the police. The investment app also says it will further investigate the hack together with security company Mandiant.
–