Betterment

betterment.com

1,411,891
Exposed Records
Jan 2026
Breach Date
6 months ago
Unknown
Password Risk
Finance industry
Finance
Industry
Added to XposedOrNot on February 5, 2026 · #345 of 763 breaches by records exposed

About This Breach

Betterment, an automated investment platform, confirmed a data breach in January 2026 attributed to a social engineering attack that exposed 1.4 million unique email addresses along with names and geographic location data. A subset of affected records also included dates of birth, phone numbers, and physical addresses, while the company stated the incident did not provide attackers with access to customer accounts.

Data Exposed

Email addresses
Names
Phone numbers
Physical addresses
Dates of birth
Device information
Geographic locations

Breach Details

Breach Type Data Breach
Searchable Yes
Verified Yes
Sensitive Data No
Reference No reference available

Frequently Asked Questions

When did the Betterment data breach happen?

Betterment was breached in Jan 2026. The breach was added to the XposedOrNot index on February 5, 2026.

How many records were exposed in the Betterment breach?

1,411,891 records were exposed, making it the #345 largest of the 763 breaches in our index.

What data was exposed in the Betterment breach?

The exposed data includes: Email addresses, Names, Phone numbers, Physical addresses, Dates of birth, Device information, Geographic locations.

What should I do if I was affected by the Betterment breach?

Change your password on the affected service (and anywhere you reused it), turn on two-factor authentication, and set up free breach alerts on XposedOrNot so you know the moment your email appears in a new breach.

What Should You Do?

High Priority

Enable Two-Factor Authentication

Add 2FA on all supported accounts using an authenticator app like Google Authenticator or Authy.

Recommended

Watch for Phishing Calls & SMS

Be cautious of unexpected calls or texts asking for personal information.

Recommended

Beware of Scam Mail

Be skeptical of unexpected correspondence requesting personal details.

Recommended

Review Device Security

Update your devices and browsers, and check for unauthorized logins.

Recommended

Monitor Your Accounts

Set up login alerts and review account activity regularly for suspicious access.