Almost 1.4M users reportedly affected in Betterment breach

Automated investment platform Betterment was reported by data breach notification Have I Been Pwned to have had data from nearly 1.4 million user accounts compromised following a cyberattack last month, according to The Register.

Included in the pilfered data were names, email addresses, and geographic details, said HIBP, which added the impacted email accounts to its database. Betterment, which detected unauthorized access to certain internal systems on Jan. 9, said that attackers leveraged social engineering to infiltrate third-party marketing and operations tools, which were then used to deliver a fraudulent cryptocurrency promotion disguised as an official company message.

While customer investment accounts, login credentials, and passwords were not affected by the breach, Betterment confirmed the exposure of contact and identity-related details, including physical mailing addresses, birthdates, and phone numbers belonging to certain users. The company is working with an independent data analytics provider to review material allegedly posted online by a group claiming responsibility for the breach.