Stock trading platform Robinhood disclosed a data breach after an unauthorized party hacked their systems and affected millions of customers.
- Robinhood disclosed a data breach in which the attacker could access customer information, including full names, email addresses, and a limited number of people, data of birth, and zip codes.
- The attacker used social engineering against Robinhood's customer support and tricked an employee over the phone to provide access to the investment brokerage's systems.
- Robinhood reported the extortion attempt to law enforcement.
Stock trading platform Robinhood disclosed a data breach after an unauthorized party hacked their systems and affected millions of customers.
The attack occurred on November 3rd after a threat actor contacted a customer support employee and used social engineering to access computer support systems.
After accessing the support systems, the threat actor was able to access customer information including,
- Email addresses for 5 million customers.
- Full names for 2 million.
- Name, date of birth, and zip code for 300 people.
- More extensive account information for ten people.
The company reported that they do not believe any Social Security numbers, bank account numbers or debit card numbers were exposed in the attack.
“At this time, we understand that the unauthorized party obtained a list of email addresses for approximately five million people, and full names for a different group of approximately two million people," disclosed a blog post published today about the security incident.
“We also believe that for a more limited number of people—approximately 310 in total—additional personal information, including name, date of birth, and zip code, was exposed, with a subset of approximately ten customers having more extensive account details revealed."
Robinhood said it is in the process of making "appropriate disclosures to affected people" and is continuing to investigate with the help of security firm Mandiant.
For the latest cyber threats and the latest hacking news please follow us on Facebook, Linkedin, and Twitter.
You may be interested in reading: How to Survive the COVID Time Cyber Security Threats?