Investment and stock trading app Robinhood stored some user credentials, including passwords, in plaintext on internal systems, the company revealed today. This particularly dangerous security misstep could have seriously exposed its users, though it says that it has no evidence the data was accessed improperly. Better change your password now.

Sensitive data like passwords and personal information are generally kept encrypted at all times. That way if the worst came to pass and a company’s databases were exposed, all the attacker would get is a bunch of gibberish. Unfortunately it seems that there might have been a few exceptions to that rule.

A number of users, including CNET’s Justin Cauchon, received the following notice from Robinhood in an email:

When you set a password for your Robinhood account, we use an industry-standard process that prevents anyone at our company from reading it. On Monday night, we discovered that some user credentials were stored in a readable format within our internal systems. We wanted to let you know that your password may have been included.

We resolved this issue, and after thorough review, found no evidence that this information was accessed by anyone outside of our response team.

It seems that if it were truly “industry-standard,” then the rest of the industry would also have stored passwords in plaintext. Come to think of it, that would explain a lot, since Google, Facebook, Twitter, and others have all managed to make this same mistake recently.

A Robinhood representative stressed the rapidity of the company’s response to the issue, though they would not comment on how it was first discovered, nor how long the data was stored that way, nor what deviation from these industry norms caused the problem, nor how many users were affected, nor whether answers to these questions would ever be forthcoming. They did offer the following statement:

We swiftly resolved this information logging issue. After a thorough review, we found no evidence that this customer information was accessed by anyone outside of our response team. Out of an abundance of caution, we have notified customers who may have been impacted and encouraged them to reset their passwords. We take our responsibility to customers seriously and place an immense focus on working to ensure their information is secure.

If you got an email, you were among the unlucky few many majority handful some, so change your password. If you didn’t get an email… also change your password. You can never be too careful.

Source: Tech Crunch Startups | Robinhood stored passwords in plaintext, so change yours now

The open office plan was intended to help collaboration and productivity across employees and teams while better utilizing less square feet per person. But the results haven’t always proven to be very successful, based on years of analysis.

Yet it is still the norm for tech companies of all sizes, and will likely stay that way.

Based on my years of experience working with hundreds of companies, I’ll lay out a basic framework below to help you think through how to adapt an open-office situation to best meet your needs.

I’ll also walk you through the example of a growing venture-backed startup that’s staffing up in one of the tougher office markets in the world: Manhattan.

But first, take a look at the data. Studies have shown that open floor plans can inhibit productivity and health. Open office workers take 62% more sick days than those in private offices, and a mere three hours of steady noise can cause measurable distress and a decrease in motivation. Face-to-face communication has been observed to actually decrease in open plan environments, with a measurable negative impact on productivity.

Considering that 70% of Americans today work in an open office, the issue of constant noise and distraction is ubiquitous across the country. The result is a bad rap—one doesn’t need to look very far to find one of the many articles online criticizing the design.

Source: Tech Crunch Startups | How startups can make the open office work, for employers and employees