2026 Robinhood — unverified DuckDB darkweb listing; 14.5M user records alleged for sale
Data compromised
Actor-claimed personal information on 14.5 million Robinhood users—unverified; specific field types not independently validated at catalog time
Technical writeup
Unverified darkweb listing — June 2026. A post on an underground forum claims that a database containing the personal information of 14.5 million Robinhood users has been leaked or offered for sale. The actor operates under the handle 'DuckDB' (distinct from the DuckDB analytics database vendor). Security researcher Nicolas Krassas (@Dinosn) flagged the listing on X. Robinhood had not acknowledged any new breach, infrastructure compromise, or unauthorized data exfiltration at catalog time. This entry is separate from Robinhood's confirmed November 2021 incident (~7M customers). BreachHistory indexes the actor-cited 14.5M count as unverified pending company or regulator confirmation.
Root cause
Unverified underground forum post by actor handle 'DuckDB' claiming a database of 14.5 million Robinhood user records is for sale; Robinhood had not confirmed at catalog time