Re:Robinhood Stored Passwords in Plaintext
by foobiekr on Wednesday July 24, 2019 @10:58PM
(#20522206)
The version I got said the following:
>>>
When you set a password for your Robinhood account, we use an industry-standard process that prevents anyone at our company from reading it. Additionally, our policy is to not store usernames and passwords for any bank accounts that you link to your Robinhood account.
On Monday night, we discovered that some user credentials were unintentionally stored in a readable format within our internal systems. We wanted to let you know that your Robinhood password and linked bank account credentials may have been included.
<<<
What level of incompetence is required to have accidentally logged bank account credentials?
This is not simple logging of login, oops, this is a very serious breach of basic security.
>>> When you set a password for your Robinhood account, we use an industry-standard process that prevents anyone at our company from reading it. Additionally, our policy is to not store usernames and passwords for any bank accounts that you link to your Robinhood account.
On Monday night, we discovered that some user credentials were unintentionally stored in a readable format within our internal systems. We wanted to let you know that your Robinhood password and linked bank account credentials may have been included. <<<
What level of incompetence is required to have accidentally logged bank account credentials?
This is not simple logging of login, oops, this is a very serious breach of basic security.