Archive — US — techcrunch
Fintech firm Betterment confirms data breach after hackers send fake crypto scamnotification to users
Fintech firm Betterment reported a data breach after hackers accessed customer information via a social engineering attack, allowing them to send a fraudulent crypto investment notification. Personal details like names, emails, and addresses were compromised, but no customer accounts or passwords were accessed. The breach was detected and managed swiftly with ongoing investigations.
Key points
- Betterment confirmed a data breach involving unauthorized access to customer personal information on January 9.
- Hackers employed a social engineering attack using third-party platforms to infiltrate Betterment's systems.
- Compromised data includes names, email addresses, postal addresses, phone numbers, and dates of birth, although no account passwords were breached.
- Fraudulent notifications were sent to users promising to 'triple the value' of crypto investments under false pretenses.
- Betterment responded immediately by revoking access and starting an investigation with a cybersecurity firm.
Why it matters
- The breach underscores heightened concerns within the fintech sector regarding data security and the threats posed by social engineering tactics.
- In 2025, with increasing reliance on digital investment platforms, the trend of cybersecurity in financial technology continues to rise, necessitating robust security measures.
- Recent global events and rising crypto investments contribute to a surge in scams targeting unsuspecting users, emphasizing the need for awareness and protection.
The Betterment data breach highlights critical vulnerabilities in fintech security, particularly in user data protection via third-party services. As the industry advances, prioritizing cybersecurity will be vital to preserve user trust and prevent similar incidents.