DBHunter
Infinity Member
Golden Member
- Joined
- August 23, 2025
- Messages
- 2,212
- Reaction score
- 4,596
- Points
- 113
- Thread Author
- #1
betterment.com
On January 9, 2026, the American investment platform, Betterment (betterment.com) suffered a data breach caused by the @ShinyHunters group, resulting in the compromise of over 20 million records. During negotiations, Betterment rejected multiple offers, some as low as $0.95 per active customer record.
After Betterment refused to pay the ransom, the group released the stolen data on January 23, 2026. The dataset contains the original user data that was stolen and is 4.5 GB in size when decompressed (~1.6 GB compressed). It includes around 1,435,141 unique email addresses and an estimated total of ~39,441,220 records across 1,114 files and 221 folders.
The compromised data includes full names, usernames, email addresses, phone numbers, physical addresses, partial payment information, customer investments and balances, KYC information, Zendesk support tickets, HubSpot CRM dumps, and much more.
Compromised data: Customer investments and balances, Email addresses, Full names, Genders, HubSpot CRM dumps, KYC information, Phone numbers, Physical addresses, Partial payment information, Usernames, Zendesk support tickets.
On January 9, 2026, the American investment platform, Betterment (betterment.com) suffered a data breach caused by the @ShinyHunters group, resulting in the compromise of over 20 million records. During negotiations, Betterment rejected multiple offers, some as low as $0.95 per active customer record.
After Betterment refused to pay the ransom, the group released the stolen data on January 23, 2026. The dataset contains the original user data that was stolen and is 4.5 GB in size when decompressed (~1.6 GB compressed). It includes around 1,435,141 unique email addresses and an estimated total of ~39,441,220 records across 1,114 files and 221 folders.
The compromised data includes full names, usernames, email addresses, phone numbers, physical addresses, partial payment information, customer investments and balances, KYC information, Zendesk support tickets, HubSpot CRM dumps, and much more.
Compromised data: Customer investments and balances, Email addresses, Full names, Genders, HubSpot CRM dumps, KYC information, Phone numbers, Physical addresses, Partial payment information, Usernames, Zendesk support tickets.
