Security News > 2021 > November > Robinhood Trading Platform Data Breach Hits 7M Customers
Investor trading app company Robinhood Markets has confirmed a data breach that affects the personal information of about 7 million customers - roughly a third of its user base.
The perpetrator attempted to extort the company, demanding payment in return for not releasing the stolen data.
This is especially important in an era when most employees work in a hyper-accelerated data environment, added Trevor Morgan, product manager with data security specialists comforte AG, in an email.
"One, build an organizational culture that values data privacy and encourages employees to slow down and consider all of the ramifications before acting on requests for sensitive information," he explained.
Two, IT leaders can consider data-centric security as a means to protect sensitive data rather than the perimeters around data.
"Tokenization, for example, not only makes sensitive data elements incomprehensible, but it also preserves data format so business applications and users can still work with the data in protected states. If you never de-protect data, chances are that even if it falls into the wrong hands, the sensitive information cannot be compromised."
News URL
https://threatpost.com/robinhood-trading-platform-data-breach/176106/
Related news
- Dutch Police: ‘State actor’ likely behind recent data breach (source)
- Comcast and Truist Bank customers caught up in FBCS data breach (source)
- Internet Archive hacked, data breach impacts 31 million users (source)
- Internet Archive data breach, defacement, and DDoS: Users’ data compromised (source)
- Fidelity Investments says data breach affects over 77,000 people (source)
- Fidelity Data Breach Exposes Data of Over 77,000 Customers (source)
- USDoD hacker behind National Public Data breach arrested in Brazil (source)
- Tech giant Nidec confirms data breach following ransomware attack (source)
- Insurance admin Landmark says data breach impacts 800,000 people (source)
- Henry Schein discloses data breach a year after ransomware attack (source)