Fintech firm Betterment confirms data breach after hackers send fake crypto scam notification to users

Betterment, an automated investment platform, has reported a security breach that allowed hackers to infiltrate its systems and access sensitive customer data. The incident occurred on January 9, when attackers utilized social engineering tactics to exploit vulnerabilities in third-party platforms employed by the company for marketing and operational purposes. In a notification sent to customers, Betterment revealed that personal details such as names, email addresses, physical addresses, phone numbers, and birthdates were compromised during the breach. Following this unauthorized access, the hackers sent a deceptive message to users, claiming they could significantly increase their cryptocurrency holdings by transferring $10,000 to a wallet controlled by the attackers, as highlighted by The Verge. Although Betterment did not disclose the exact number of affected customers, it did confirm that it promptly identified the breach on the same day it occurred. The company swiftly revoked the unauthorized access and initiated a thorough investigation with the assistance of a cybersecurity firm. Betterment has also reached out to the impacted customers, advising them to disregard the fraudulent message. In their communication, Betterment reassured users that, according to their ongoing investigation, no customer accounts were breached, nor were any passwords or login credentials compromised. However, representatives from Betterment have not yet provided additional commentary regarding the specifics of the incident. Interestingly, Betterment's security incident page currently contains a hidden 'noindex' tag in its source code, which prevents search engines from indexing the page. This makes it more challenging for individuals searching online to find information about the breach.