Cyber History · Deep DiveRobinhood · Unidentified · Nov 3, 2021

Robinhood:
A Phone Call, 7 Million Users

A single vishing call -- the attacker posing as legitimate support and tricking a customer-service employee into installing remote-access software -- exposed contact information for 7 million Robinhood users.
Threat ActorUnidentified
Nov 3 Vishing call grants internal system access
T1598.004
Voice phishing (vishing) against a support employee
Nov 8 Breach disclosed publicly
The story in numbers
7M
users affected
5M
users with only email addresses exposed
10
accounts with extensive data exposed