Betterment Data Breach Lawsuit: 1.4 Million People, Three Cases, No Settlement
Active Litigation
On January 9, 2026 someone talked their way into a Betterment employee's account, sent a fake “triple your crypto” offer to about 460,000 customers and took data tied to roughly 1.4 million people — mostly names and email addresses. Three proposed class actions were filed in federal court in Manhattan. As of October 2026 there is no Betterment settlement, no claim form and no deadline.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What Happened and What the Lawsuits Say
Betterment's own post-incident report says an unauthorized third party gained access to an employee's account through social engineering on January 9, 2026. That access reached applications Betterment uses for marketing and operations — not the systems that hold investment accounts. Betterment says its investigation, supported by CrowdStrike, confirmed that no customer accounts, passwords or login information were compromised.
The intruder used the access to send a fraudulent crypto offer to approximately 460,000 customers by email and push notification, and obtained data associated with approximately 1.4 million customers and business contacts. Betterment says that in the vast majority of cases this was a name alone or a name with an email address. A subset also had physical addresses, phone numbers or birthdates exposed.
The lawsuits allege that Betterment failed to protect that information. They plead negligence, invasion of privacy and breach of fiduciary duty, and seek class certification, damages and a jury trial. These are allegations; no court has ruled on them.
Case details
Three proposed class actions are listed in the U.S. District Court for the Southern District of New York: Huff, et al. v. Betterment, No. 1:26-cv-00364 (filed January 2026); Tsou v. Betterment LLC, et al., No. 1:26-cv-00444 (filed January 2026); and Hufnus et al. v. Betterment, LLC, No. 26-cv-1259 (filed February 2026). We could not verify from the docket whether they have been consolidated or which judge presides.
A separate suit is not about the breach: a class action reported on July 13, 2026 alleges that Betterment's Transfer Sweep Program parked client cash at partner banks without paying interest. Being a breach victim does not make you part of that case.
Status: Pending, No Settlement
If you see a “Betterment settlement” claim site today, it is not an official one. A real settlement would be approved by the court and announced through a court-appointed administrator.
Follow this case
There's no claim deadline yet. We'll email you if a settlement opens a claim period.
Who Could Be in a Class
The suits seek to represent people whose information was taken in the January 9 incident. Betterment's figure is approximately 1.4 million customers and business contacts; Have I Been Pwned counted 1,435,174 accounts in the leaked data. You do not sign up to be included — if a class is certified or a settlement is reached, an administrator notifies class members.
How to tell if you were in it: Betterment emailed all customers on January 12, 2026. A limited subset whose data combined more sensitive fields later received an individual notification. You can also look up your email address on Have I Been Pwned, which lists the Betterment breach.
Is There Money?
One thing has been paid outside the lawsuits: Betterment says it made customers who lost money to the fake crypto offer whole for their losses. If you sent crypto in response to that message and were not reimbursed, contact Betterment directly at fraud@betterment.com.
For context only: breaches that mostly expose names and email addresses tend to settle for less per person than breaches involving Social Security numbers or medical records. Our data breach settlement calculator shows what resolved cases have paid.
Betterment Breach Timeline
January 9, 2026 — The Breach and the Fake Crypto Offer
An intruder gets into an employee's account through social engineering and sends a fraudulent crypto offer to about 460,000 customers. Betterment revokes the access.
January 12–13, 2026 — Customer Email, Extortion, Outage
Betterment emails all customers about the incident. A criminal group demands a crypto payment, which Betterment refuses. On January 13 a DDoS attack causes outages; full access returns by 2:40 PM ET.
January 23, 2026 — Data Posted Online
The group posts data from the incident on a leak site that has since been removed. Have I Been Pwned later counts 1,435,174 accounts.
January–February 2026 — Three Class Actions
Huff (1:26-cv-00364) and Tsou (1:26-cv-00444) are filed in January, Hufnus (26-cv-1259) in February, all in the Southern District of New York.
March 30, 2026 — Betterment Closes Its Investigation
Betterment publishes its post-incident report: data on about 1.4 million people, no accounts or passwords compromised.
October 2026 — Pending, No Settlement
As of October 2026 the suits are pending. There is no settlement, no claim form and no deadline.
Three Things to Watch For
This breach started with a scam message, and the leaked names and emails make the next one easier:
“Betterment is tripling your crypto”
The January 9 message promised to triple Bitcoin and Ethereum deposits — reportedly up to $10,000 sent for $30,000 back within three hours. It was fake. Any repeat of that offer is a scam, whatever sender address it shows.
“Claim your Betterment settlement” emails
There is no settlement and no claim form. A message asking for your login, Social Security number or a fee to “secure your payment” is not from a court administrator. Betterment says it will never call, text or email asking for your password or other sensitive information.
Fake Betterment security calls
Callers who know your name, email and maybe your phone number can sound convincing. If someone claims your account is at risk and asks you to move money or read out a code, hang up and contact Betterment through the app.
Betterment Data Breach — Questions People Actually Ask
Short answers to the questions people ask most about this case.
What is the Betterment controversy?
Two separate things. First, the January 9, 2026 data breach, in which an intruder sent a fake crypto offer to about 460,000 customers and took data tied to about 1.4 million people; three class actions followed. Second, an unrelated suit reported in July 2026 alleging that Betterment's Transfer Sweep Program held client cash without paying interest.
Is there a Betterment settlement or claim form?
No. As of October 2026 the Betterment data breach lawsuits are pending in the Southern District of New York. There is no settlement, no fund, no claim form and no deadline. If that changes, class members are notified by a court-appointed administrator.
What data was exposed?
Betterment says that in most cases it was a name alone or a name with an email address. A subset also had physical addresses, phone numbers or birthdates. Have I Been Pwned also lists device information, employers' geographic locations and job titles in the leaked data. Betterment says no passwords, logins or accounts were compromised.
Was the Betterment data breach email real?
Betterment did email all customers about the incident on January 12, 2026, and later sent individual notices to a smaller group whose data was more sensitive. The January 9 “triple your crypto” message was the fraud itself. A real Betterment notice does not ask for your password.
How to check if data has breached?
Enter your email address on Have I Been Pwned, which lists the Betterment breach of January 2026. A hit means your email was in the leaked file — it does not mean anyone got into your investment account.
I lost money to the fake crypto offer. What now?
Betterment says it made customers impacted by the offer whole for their losses. If you have not been reimbursed, contact Betterment at fraud@betterment.com and keep your transaction records.
How much money do you get from a data breach settlement?
From this case, nothing yet — there is no settlement. Payouts in other breach settlements depend on the fund size, the number of claimants and what data was exposed. Our payout calculator explains the math once a fund exists.
Do I need to do anything right now?
Betterment says no customer action is required. It is still worth turning on hardware-key or app-based two-factor login, ignoring unexpected crypto offers and treating any “settlement” message about Betterment as suspect until a court approves one.
About This Information
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated - $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Open Class Action SettlementsSettlements with claim forms you can file right now
- Data Breach Settlement CalculatorWhat comparable breach settlements have actually paid
- Settlement Payout CalculatorEstimate a per-person share once a fund exists
- Merrill Lynch Cash Sweep SettlementA resolved cash-sweep case, for comparison with the Betterment suit