Betterment Data Breach Exposes Sensitive Information of 1.4 Million Customers

Automated investment platform Betterment confirmed a January 2026 breach affecting approximately 1.4 million customers after threat actors used social engineering to compromise third‑party support platforms, exfiltrating extensive PII (names, DOBs, emails, phones, addresses, employer/job details, device/geolocation data) and running a fraudulent cryptocurrency campaign; a DDoS on January 13 likely acted as a distraction, and the exposed data appeared on Have I Been Pwned, while Betterment reported no account passwords or customer funds were accessed.