Robinhood Markets (NASDAQ:HOOD) has said that the personal information of about seven million people, roughly a third of its customers, was compromised in a cyberattack last week.
The hacker obtained email addresses of about five million people as well as full names for a separate group of about two million people, Robinhood said in a written statement.
For some customers, more personal data was exposed, including names, birth dates and postal codes. The online brokerage said it believes no social security, bank account or debit-card numbers were exposed during the November 3 cyberattack, nor that customers incurred any financial losses.
The hacker made threats about what would be done with the compromised information, although it wasn’t a ransomware attack, according to Robinhood.
Shares of Robinhood fell 3% to $36.84 U.S. in extended trading. The shares were little changed on the year through the close of regular trading yesterday (November 8).
In a separate episode last year, almost 2,000 Robinhood accounts were compromised in a hacking spree, where customer accounts were looted. Since then, the company has been working to demonstrate that it’s a reliable brokerage for new investors.