Apr 18, 2026, 11:14 PM
(This post was last modified: May 26, 2026, 05:51 PM by ShinyHunters.)
Website: betterment.com
On January 9, 2026, the American investment platform, Betterment (betterment.com) suffered a data breach caused by the ShinyHunters resulting in the compromise of over 20 million records. During negotiations, Betterment rejected multiple offers, some as low as $0.95 per active customer record.
The compromised data includes full names, usernames, email addresses, phone numbers, physical addresses, partial payment information, customer investments and balances, KYC information, Zendesk support tickets, HubSpot CRM dumps, and much more.
Compromised data:
Download
On January 9, 2026, the American investment platform, Betterment (betterment.com) suffered a data breach caused by the ShinyHunters resulting in the compromise of over 20 million records. During negotiations, Betterment rejected multiple offers, some as low as $0.95 per active customer record.
After Betterment refused to pay the ransom, the group released the stolen data on January 23, 2026. The dataset contains the original user data that was stolen and is 4.5 GB in size when decompressed (~1.6 GB compressed). It includes around 1,435,141 unique email addresses and an estimated total of ~39,441,220 records across 1,114 files and 221 folders.The compromised data includes full names, usernames, email addresses, phone numbers, physical addresses, partial payment information, customer investments and balances, KYC information, Zendesk support tickets, HubSpot CRM dumps, and much more.
Compromised data:
Customer investments and balances, Email addresses, Full names, Genders, HubSpot CRM dumps, KYC information, Phone numbers, Physical addresses, Partial payment information, Usernames, Zendesk support tickets.
Telegram: @shinygroupp
We do not operate on any other Telegram Account.
We do not operate on any other Telegram Account.
