Some Robinhood users say someone sold their investments and withdrew funds; Robinhood says users' personal email accounts were compromised, not its systems
This is the second account-takeover story Robinhood has faced in weeks: days after this report, the company estimated that roughly 2,000 accounts were compromised in the same incident, framing most of it as breaches of users' personal email rather than its own systems. The blame placement matters because Robinhood's security track record was already under scrutiny — it had previously admitted to storing some customer passwords in cleartext.
First-order effects
Affected users have had positions sold and funds withdrawn from their brokerage accounts, with Robinhood attributing the losses to compromised personal email accounts rather than any flaw in its own platform.
Second-order effects
Robinhood's email-breach framing shifts remediation pressure onto users' personal account security — password resets, two-factor adoption — and invites scrutiny of whether the brokerage's own safeguards, coming after the cleartext-password disclosure, met the bar for accounts holding cash and securities.
Third-order effects
If retail brokerages consistently attribute takeovers to customer-side email compromises, the structural question becomes who bears liability for account-takeover fraud — pushing regulators toward treating identity verification at the brokerage as a shared obligation rather than the user's problem.
The trend: Retail brokerages are absorbing a string of security incidents — outages, cleartext passwords, mass data exposures, and account takeovers — and increasingly framing the weakest link as the customer's own email account.
Yikes. I don't like to hate on @RobinhoodApp users because I think it's great that people are investing. But this is something I consider when thinking about what platform to use. I stick with ones that have been around for several decades and have great cust service. https://twi…
Robinhood users say their accounts were hacked, with thousands of dollars withdrawn. But there was no one at customer service to call. @antoniabmassa @sooo__phie https://www.bloomberg.com/...
Also the secret sauce of Google, Facebook, Twitter et al: you get whatever version of customer service they feel like giving and are pretty much on your own in case of emergency. https://twitter.com/...
Simple ways to protect yourself now: - Slam your keyboard. This is your new password! - Turn on two-factor authentication (in Settings) - Lock your Robinhood debit card (in Cash>Lock Card & Cash>Lock Withdrawals) https://twitter.com/...
Multiple Robinhood users say cyber thieves broke into their accounts, sold stocks and took the money. But because the app has no emergency contact line, they were left powerless to stop it https://www.bloomberg.com/... via @business
this is my greatest fear that someone cyber hacks my trading account someone tried once to hack into my account he changed my password and logged in but couldnt get the money https://twitter.com/...
Several Robinhood users say they had their accounts looted. Because the wildly popular app has no emergency phone number, some said they tried in vain to intervene. More on @wealth: https://www.bloomberg.com/... https://twitter.com/...