Betterment has confirmed a data breach resulting from a social engineering attack on January 9, which exposed customer contact information through third-party tools. The breach allowed attackers to send fraudulent crypto-themed messages to a subset of customers, soliciting funds under false pretenses. Betterment assured that no customer accounts or passwords were compromised. The breach involved unauthorized access to marketing and operations platforms, revealing names, email addresses, and in some cases, postal addresses, phone numbers, and birthdates. Betterment has engaged CrowdStrike for forensic analysis and plans to release a post-incident review within 60 days. The incident underscores the vulnerability of third-party platforms in fintech, highlighting the need for robust security measures beyond core systems.