Betterment

Disclosed Jan 10, 20261,435,174 accountsConfirmed

Betterment breach exposes 1.4 million accounts after social engineering attack

Robo-advisor Betterment said attackers used social engineering to access systems and send crypto scam messages to customers on January 9, 2026. Have I Been Pwned later counted 1,435,174 accounts with contact details, birth dates and job data; Betterment said no passwords or account access were compromised.

What is known

People affected	1,435,174 (accounts in the leaked data, per Have I Been Pwned)
Disclosed	Jan 10, 2026
Discovered	Jan 9, 2026
Happened	Jan 9, 2026
Attack	Phishing
Data exposed	Dates of birthEmailsEmploymentLocationNamesPhone numbersAddresses
Sector	Finance · US
Status	Confirmed
Check your email	Have I Been Pwned

Sources

Official noticeatg.wa.gov

Washington Attorney General breach notice: Betterment

Aggregatorhaveibeenpwned.com

Have I Been Pwned: Betterment

The organizationbetterment.com

Betterment disclosure

Newsbleepingcomputer.com

Data breach at fintech firm Betterment exposes 1.4 million accounts

Notices filed

TotalJan 10

ResearchCount not stated

Accounts in the dataFeb 5

Have I Been Pwned1,435,174 people

Residents of WAMar 27

Washington AG2,750 people

History of this record

attack2026-09-25

hacking to phishingby seedSource

disclosed2026-09-25

2026-02-05 to 2026-01-10by seedSource

summary2026-09-25

In January 2026, the automated investment platform Betterment confirmed it had suffered a data breach attributed to a social engineering attack . As part of the incident, Betterment customers received fraudulent crypto-related messages prom to Robo-advisor Betterment said attackers used social engineering to access systems and send crypto scam messages to customers on January 9, 2026. Have I Been Pwned later counted 1,435,174 accounts with contact details, birth dates and job datby seedSource

title2026-09-25

empty to Betterment breach exposes 1.4 million accounts after social engineering attackby seedSource

hibp2026-09-25

empty to Bettermentby backfillSource

data_types2026-09-25

[] to ["dob","emails","employment","location","names","phone","addresses"]by backfillSource

records_basis2026-09-25

empty to hibpby backfillSource

records2026-09-25

empty to 1435174by backfillSource

disclosed2026-09-25

2026-03-27 to 2026-02-05by backfillSource

summary2026-09-25

empty to In January 2026, the automated investment platform Betterment confirmed it had suffered a data breach attributed to a social engineering attack . As part of the incident, Betterment customers received fraudulent crypto-related messages promby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.

Everything about Betterment