TLDR InfoSec · MISCELLANEOUS
FINTECH FIRM BETTERMENT CONFIRMS DATA BREACH AFTER HACKERS SEND FAKE CRYPTO SCAM NOTIFICATION TO USERS
Summary from the TLDR InfoSec newsletter
Betterment disclosed that attackers used social engineering to access some customer data, including names and contact details, via third-party marketing and operations platforms, and then pushed a fake in‑app crypto message promising to triple deposits sent to a malicious wallet. The firm says no accounts or credentials were compromised. It is investigating the incident with external cybersecurity support.