TLDR InfoSec · MISCELLANEOUS

FINTECH FIRM BETTERMENT CONFIRMS DATA BREACH AFTER HACKERS SEND FAKE CRYPTO SCAM NOTIFICATION TO USERS

techcrunch.com2 min read

Summary from the TLDR InfoSec newsletter

Betterment disclosed that attackers used social engineering to access some customer data, including names and contact details, via third-party marketing and operations platforms, and then pushed a fake in‑app crypto message promising to triple deposits sent to a malicious wallet. The firm says no accounts or credentials were compromised. It is investigating the incident with external cybersecurity support.