The stock market application Robinhood, which drew a lot of reaction when it stopped trading during the Gamestop movement in the USA, came to the fore with a scandal today. The company announced in a statement that it was hacked on November 3 and the personal information of more than 7 million customers was compromised.
It was reported that there was no information such as social security numbers, bank account numbers or credit card numbers among the information seized. However, it was stated that no user suffered any financial loss. How the cyber attack took place was also shared by the company.
A customer service employee was reached through social engineering:
According to the shared statement, an unauthorized third party reached a customer service employee via phone. After that, the person logged into the customer service system. The cyber attacker(s) managed to capture the e-mail addresses of 5 million people and list the names and surnames of 2 million people.
The names, birth dates and zip codes of a small group of about 310 customers were seized. It was announced that “more comprehensive account information” of 10 users was seized. Although the company did not explain what this “comprehensive information” was, a spokesperson speaking to The Verge stated that this information does not include payment information.
Robinhood, which took the attack under control, announced that the person who made the cyber attack demanded a ransom and reported this person to law enforcement. However, no information was shared about whether the company gave the requested ransom. Robinhood enlisted the help of Mandiant, a security firm, to investigate the incident.
46338
