Betterment
Disclosed Jan 10, 20268 months ago1,435,174 accountsConfirmed
Betterment breach exposes 1.4 million accounts after social engineering attack
Robo-advisor Betterment said attackers used social engineering to access systems and send crypto scam messages to customers on January 9, 2026. Have I Been Pwned later counted 1,435,174 accounts with contact details, birth dates and job data; Betterment said no passwords or account access were compromised.
What is known
| People affected | 1,435,174 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Jan 10, 2026 |
| Discovered | Jan 9, 2026 |
| Happened | Jan 9, 2026 |
| Attack | Phishing |
| Data exposed | Dates of birth, Emails, Employment, Location, Names, Phone numbers, Addresses |
| Sector | Finance · US |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Washington Attorney General breach notice: Bettermentatg.wa.gov · Official notice | Official notice |
| Have I Been Pwned: Bettermenthaveibeenpwned.com · Aggregator | Aggregator |
| Betterment disclosurebetterment.com · The organization | The organization |
| Data breach at fintech firm Betterment exposes 1.4 million accountsbleepingcomputer.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Jan 10 | |
| Have I Been Pwnedaccounts in the data | Feb 5 | 1,435,174 |
| Washington AGresidents of WA | Mar 27 | 2,750 |
History of this record
- 2026-09-25 · attack: hacking to phishing · seed source
- 2026-09-25 · disclosed: 2026-02-05 to 2026-01-10 · seed source
- 2026-09-25 · summary: In January 2026, the automated investment platform Betterment confirmed it had suffered a data breach attributed to a social engineering attack . As part of the incident, Betterment customers received fraudulent crypto-related messages prom to Robo-advisor Betterment said attackers used social engineering to access systems and send crypto scam messages to customers on January 9, 2026. Have I Been Pwned later counted 1,435,174 accounts with contact details, birth dates and job dat · seed source
- 2026-09-25 · title: empty to Betterment breach exposes 1.4 million accounts after social engineering attack · seed source
- 2026-09-25 · hibp: empty to Betterment · backfill source
- 2026-09-25 · data_types: [] to ["dob","emails","employment","location","names","phone","addresses"] · backfill source
- 2026-09-25 · records_basis: empty to hibp · backfill source
- 2026-09-25 · records: empty to 1435174 · backfill source
- 2026-09-25 · disclosed: 2026-03-27 to 2026-02-05 · backfill source
- 2026-09-25 · summary: empty to In January 2026, the automated investment platform Betterment confirmed it had suffered a data breach attributed to a social engineering attack . As part of the incident, Betterment customers received fraudulent crypto-related messages prom · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.