Fintech firm Betterment confirms data breach after hackers send fake crypto scam notification to users

Betterment disclosed a January 9 incident in which attackers leveraged social engineering against third-party platforms to access some company systems and view customer personal data (names, emails, postal addresses, phone numbers, and dates of birth). The attackers used the access to send fraudulent crypto-targeted notifications; Betterment says no customer accounts or credentials were accessed, revoked the unauthorized access, launched an investigation with an external firm, and contacted affected customers.