Robinhood Breached by Phone-Based Social Engineering - Binary Defense

Threat Watch

Threat Watch Robinhood Breached by Phone-Based Social Engineering

Robinhood Breached by Phone-Based Social Engineering

Robinhood notified customers via email of a customer data breach that occurred on November 3, 2021. According to Robinhood’s investigation, the breach exposed:

Email addresses for 5 million users
Real names for 2 million users
Name, date of birth, and zip code for approximately 310 users
Extensive personal data for approximately 10 users

The threat actor in this incident socially engineered a customer support employee by phone and obtained access to certain customer support systems. Robinhood stated that due to this method of access, it does not believe at this time that credit cards, bank account numbers, or social security numbers were exposed.

ANALYST NOTES

In today’s threat environment, representatives of organizations must verify the identity of all callers, including phone calls appearing to be from someone else in the same organization, on the same team, or a trusted supplier or vendor. This serves to reduce insider threats, as well as reduce social engineering attacks from external criminals. It is also important to understand that even if a particular role or account does not have critical access, any level of access could provide means to perform privilege escalation, lateral movement, and also reconnaissance opportunities.

https://therecord.media/robinhood-discloses-security-breach-and-extortion-attempt/

fhttps://blog.robinhood.com/2021/11/8/data-security-incident