News for hackers. Stuff that matters.

A comment on Robinhood says millions of customer names, email addresses taken in data breach. Parent comment

Re:Robinhood says millions of customer names, email addresse... by copo233 on Tuesday November 09, 2021 @11:31AM (#29163853)
I don't even have an account with Robinhood. I've never done any business with them but somebody else set up an account with my email address. After taking way too long to have my email removed from that account, they now managed to give it to some criminals as well.
[ Parent | on HN ]
Re:Robinhood says millions of customer names, email addresse... by MerelyMortal on Tuesday November 09, 2021 @12:51PM (#29164889)
I get emails from legitimate companies (including Wells Fargo, a major U.S. bank) meant for others, because they never validated the email address their customers gave them.

Email Address Validation is not "yep, that looks like an email address", it's "let's send a confirmation email and have them click on a link".

Please do NOT trust users when it comes to email addresses!

[ Parent | on HN ]
Re:Robinhood says millions of customer names, email addresse... by hinkley on Wednesday November 10, 2021 @01:56PM (#29178801)
This is why you verify email addresses. Especially with financial institutions.

Mint used to send me somebody else's statements. I don't understand how companies in sober industries can be this reckless.

[ Parent | on HN ]