Robinhood Estimates Hackers Infiltrated Almost 2,000 Accounts (bloomberg.com) 19
An anonymous reader quotes a report from Bloomberg: Almost 2,000 Robinhood Markets accounts were compromised in a recent hacking spree that siphoned off customer funds, a sign that the attacks were more widespread than was previously known. A person with knowledge of an internal review, who asked not to be identified because the findings aren't public, provided the estimated figure. When Bloomberg first reported on the hacking spree last week, the popular online brokerage disclosed few details. It said "a limited number" of customers had been struck by cyber-criminals who gained access by breaching personal email accounts outside of Robinhood, an assertion that some of the victims acknowledge and others reject.
The attacks unleashed a torrent of complaints on social media, where investors recounted futile attempts to call the brokerage, which doesn't have a customer service phone number. Robinhood, which has more than 13 million customer accounts, is now considering whether to add a phone number along with other tools, the person said. This week, Robinhood sent push notifications to users suggesting they enable two-factor authentication on their accounts. It also plans to send customers more advice on security, according to the statement. Several victims said they found no sign of criminals compromising their email accounts. And some said their brokerage accounts were accessed even though they had set up two-factor authentication.
The attacks unleashed a torrent of complaints on social media, where investors recounted futile attempts to call the brokerage, which doesn't have a customer service phone number. Robinhood, which has more than 13 million customer accounts, is now considering whether to add a phone number along with other tools, the person said. This week, Robinhood sent push notifications to users suggesting they enable two-factor authentication on their accounts. It also plans to send customers more advice on security, according to the statement. Several victims said they found no sign of criminals compromising their email accounts. And some said their brokerage accounts were accessed even though they had set up two-factor authentication.
Not that many (Score:2)
Re: Not that many (Score:2)
Re: (Score:2)
Re: (Score:2)
I'll bet it is more like, Robinhood (robbing from the poor and giving to the rich, themselves) are only willing to accept the 2000 accounts with the lowest losses as hacks, all the others, nope, nuh, uh, that was the customer and they will fight it in court to bankruptcy, as they try to suck as much capital out of the company they can, ohh, look it got hacked too and all it's cash reserves were 'er' 'um' stolen, so bankruptcy and bad luck for everyone. They are dead, who would be stupid enough to trust them
Fail (Score:4, Insightful)
Well, of course they're considering adding a phone number, they thought that not even trying meant they couldn't get in any trouble for doing it wrong, and then their lawyers explained the word "gross" in "gross negligence" to them.
You were holding the money. You were unreachable when your customers tried to report ongoing attacks that would cost them additional money. You are one who got hacked, actually, not the customers. Criminals accessed your computer systems and took the money out, that you were in either deposit or trust. Expensive.
Be nice about paying them back, they can't add punitive damages if you make everybody whole! That's your only way out.
Re: (Score:2)
They allow for using an authentication code for 2FA and I can't find a way to bypass it. This means I am immune from SIM hijacking if I choose to be.
With Vanguard for example if I login with a mobile browser it reverts to SMS based 2FA even though I have chosen to not use that method.
Robinhood actually enforces the security I request.
Re: (Score:3)
It'll probably just route you to the phone tree.
Cuz you know, Sherwood Forest and all.
Re: (Score:2)
Sounds like the bank in Legend Of the Red Dragon!
I'll stick with Fidelity.
Robinhood? (Score:2)
Wasn't he supposed to be taking from the rich to give to the poor? What happened to the guy?
How far the band of Merry Men have fallen if they are reduced to stealing from the common man's brokerage account..
Becoming more common (Score:3)
which doesn't have a customer service phone number.
More and more companies, even the big ones, are foregoing anything resembling ease of customer service in favor of either offshoring to script kiddies or some nebulous form which might possibly get to someone who might possibly be able to help you. After a few dozen back and forth emails over a day or two.
Because picking up the phone and talking to someone to get the full story is so passe.
Re: (Score:2)
...Because picking up the phone and talking to someone to get the full story is so passe.
Much like acceptable customer service.
modern times (Score:3, Insightful)
The Sheriff of Nottingham again? (Score:2)
Like last week?
Re: (Score:1)
Their mission changed. Steal from the honest middle class and give to the dishonest middle class.
Maybe worse than it appears (Score:2)
I just logged into my account to look and even though I turned on 2FA a while back it was disabled on my account. Not a good sign.
Re: (Score:2)
Find anyone else. (Score:2)
robinhood ... now considering whether to add a phone number along with other tools
I hope all robinhood users are considering whether to add a 'broker' with a phone number.