Betterment Got Got: The ShinyHunters Voice Phishing Attack

About this episode

This episode details a voice phishing attack on Betterment that led to a significant data breach.

On January 9th, 2026, a Betterment employee got a phone call from IT. The voice was friendly. The request was routine. The login page looked exactly like the one he used every day. Three minutes later, hackers had full access to the systems Betterment uses to communicate with millions of customers, and they used those systems to send a crypto scam from Betterment's own channels. Within two weeks, 1.4 million customer records were dumped on the dark web. This is the story of how ShinyHunters, one of the most active cybercrime groups in the world, used a voice phishing call to breach one of America's biggest investment platforms. No malware. No code exploits. Just a phone call and a push notification. We tell the full story from the employee's perspective and break down what you can do to make sure it doesn't happen to you.

People in this episode

Host: dontgetgot

Topics covered

• cybersecurity
• voice phishing
• data breach
• investment platforms
• cybercrime

Keywords

• Betterment
• ShinyHunters
• voice phishing
• cybercrime
• data breach
• crypto scam
• customer records

Mentioned in this episode

Organizations: Betterment, ShinyHunters

More episodes of dontgetgot

• Linwei Ding - Google's Insider Threat · May 12, 2026 · 21 min
• Linwei Ding - Google's Insider Threat · May 7, 2026 · 2 min
• The Bangladesh Bank Heist: How a Typo Saved $900 Million · April 10, 2026 · 12 min
• The Call That Crashed Las Vegas - MGM Hack · April 8, 2026 · 16 min
• Jho Low - The Prince of Malaysia · April 6, 2026 · 16 min
• The Contractor's Son - How a 21 Year Old Stole $46 Million From The US Marshals · March 25, 2026 · 15 min