The data including names, emails, birth dates, addresses and phone numbers were obtained via the third party analytics platform provider Waydev and posted in a public forum.
The startup says that bank account numbers, credit card numbers, records of financial transactions and unencrypted Social Security numbers were not affected. Says a statement: "Dave has no evidence that any unauthorized actions were taken with any accounts or that any user has experienced any financial loss as a result of this incident." The data was taken when hackers breached analytics platform Waydev, a former Dave third party partner.
https://www.finextra.com/newsarticle/36286/banking-app-dave-hit-by-data-breach