Actually, I'm afraid it was a bit worse than this, the hacker could also disable MFA and add trusted devices to customer accounts. That's one reason why I decided not to move all of my stocks to discount brokers like Saxo and DeGiro, who knows how bad their security systems are. https://www.vice.com/en/article/epxdmn/robinhood-hackers-internal-tool-security-features
