Security News > 2021 > November > Robinhood Trading App Suffers Data Breach Exposing 7 Million Users' Information
Robinhood on Monday disclosed a security breach affecting approximately 7 million customers, roughly a third of its user base, that resulted in unauthorized access of personal information by an unidentified threat actor.
"Based on our investigation, the attack has been contained and we believe that no Social Security numbers, bank account numbers, or debit card numbers were exposed and that there has been no financial loss to any customers as a result of the incident," the Silicon Valley financial company noted.
Of the latter, at least 10 customers have had their "Extensive account details" revealed.
Once the breach was reined in, Robinhood said the infiltrator demanded an extortion payment in exchange for the stolen data, prompting the firm to involve law enforcement authorities in the matter.
Interestingly, the list of email addresses also includes accounts that have been previously deactivated.
In the wake of the breach, Robinhood is recommending users to visit Help Center > My Account & Login > Account Security to secure their accounts with two-factor authentication.
News URL
http://feedproxy.google.com/~r/TheHackersNews/~3/7HmPoF09t-A/robinhood-trading-app-suffers-data.html
Related news
- Dutch Police: ‘State actor’ likely behind recent data breach (source)
- Comcast and Truist Bank customers caught up in FBCS data breach (source)
- Internet Archive hacked, data breach impacts 31 million users (source)
- Internet Archive data breach, defacement, and DDoS: Users’ data compromised (source)
- Fidelity Investments says data breach affects over 77,000 people (source)
- Fidelity Data Breach Exposes Data of Over 77,000 Customers (source)
- USDoD hacker behind National Public Data breach arrested in Brazil (source)
- Tech giant Nidec confirms data breach following ransomware attack (source)
- Insurance admin Landmark says data breach impacts 800,000 people (source)
- Henry Schein discloses data breach a year after ransomware attack (source)