What Happened
In November 2021, specifically on November 3, online trading platform Robinhood suffered a data breach when an unauthorized intruder socially engineered a customer support employee by phone, gaining access to internal support systems. This exposed personal information of approximately 7 million users (about one-third of its customer base), including email addresses for 5 million people, full names for 2 million people, several thousand phone numbers, name/date of birth/zip code for 310 individuals, and more extensive account details for about 10 customers; no Social Security numbers, bank account numbers, or debit card details were compromised, and there was no reported financial loss. Robinhood contained the incident, notified affected users, collaborated with Mandiant and law enforcement after the attacker demanded extortion, and publicly disclosed it on November 8 with updates on November 16.
