Betterment Data Breach Lawsuit Investigation

Active investigation · Free, confidential case review
Call (954) 799-5914
Data Breaches / Betterment
Active investigation Data breach · Financial Services Notices mailed Aug 5, 2026

Received an August 2026 breach notice from Betterment?

Dapeer Law, P.A. is investigating a potential class action against Betterment Holdings, Inc., a New York based online financial services and robo-advisory platform, on behalf of individuals whose personal information may have been exposed in a cybersecurity incident at one of the company's third-party sales vendors, reported to regulators in August 2026.

Submit your claim See what to do No fee unless we recover for you
Breach window
Not disclosed
Vendor file accessed at Klue Labs Inc.
Notification delay
Not disclosed
Discovery date not stated, notices Aug 2026
Credit monitoring
24 months
Through Kroll (single bureau)
Eligibility

Who may qualify

You may be eligible to participate in a class action if any of the following applies:

  • You received a data breach notification letter from Betterment dated August 2026.
  • Your letter offered enrollment in free Kroll identity monitoring, including credit monitoring, fraud consultation, and identity theft restoration.
  • You had personal or financial information held by the company in its capacity as an online investment and cash management provider, including information shared with the vendors that support its sales operations.
  • No proof of harm required to consult with counsel. You do not need to have already suffered identity theft to explore your legal options.
  • Excluded: individuals who did not receive a breach notice and whose information was not involved in the incident.

Not sure if you qualify?

Send us your notice, we'll confirm your eligibility at no cost.

Check eligibility
Background

What happened

On August 5, 2026, Betterment Holdings, Inc., a New York based online financial services platform, notified the Massachusetts Attorney General of a cybersecurity incident involving one of its vendors. According to the notice, Klue Labs Inc., a sales enablement vendor that had access to a Salesforce database containing Betterment data, informed the company that an unauthorized actor had accessed a file containing personal information. Betterment states that its own computer systems were not accessed.

The notice reports that the file involved contained a name and Social Security number, and Betterment's filing with Massachusetts regulators lists one affected resident of the Commonwealth. Affected individuals are being offered two years of complimentary identity monitoring through Kroll, including credit monitoring, fraud consultation, and identity theft restoration, with an activation deadline of January 31, 2027. Neither the date the unauthorized access occurred nor the date it was discovered appears in the public notice, so the length of the notification delay cannot be determined from the filing.

Because Social Security numbers cannot be easily changed, their exposure creates a long-term risk of identity theft, fraudulent account openings, and tax fraud. Whether Betterment's oversight of its vendors' data security practices, and the safeguards Klue Labs applied to the Salesforce data it could reach, met legal standards is among the issues being evaluated.

Third-party vendor breach SSN exposure Salesforce database access Massachusetts AG notice Financial services breach
Action plan

What to do if you received a letter

1

Keep your notice letter

Do not discard it. Your letter contains the Kroll membership number needed to activate identity monitoring and is important evidence if you decide to participate in a lawsuit.

2

Enroll in the free 24-month Kroll identity monitoring

Activate the Kroll identity monitoring offered in your letter before the January 31, 2027 deadline. Accepting this benefit does not waive your right to pursue legal action.

3

Place a fraud alert or credit freeze

Contact Equifax, Experian, and TransUnion to place a fraud alert or freeze on your file. Request a free weekly credit report from AnnualCreditReport.com, and use the FTC's IdentityTheft.gov recovery guide. Because a Social Security number was reported as involved, also watch for credit inquiries you did not authorize and for tax filings submitted in your name.

4

Speak with a data breach attorney

Consultations with Dapeer Law are free and confidential. We'll review your notice, explain your options, and advise whether you may be eligible to join a class action.

Submit your notice for a free review

Two minutes online. A licensed attorney reviews every submission.

Submit your claim
Timeline

Breach timeline

Date not disclosed Passed
Unauthorized actor accesses a file in the Klue Labs Salesforce environment
Date not disclosed Passed
Klue Labs Inc. informs Betterment of the cybersecurity incident
Aug 5, 2026 Passed
Notice filed with the Massachusetts Attorney General, letters mailed
Aug 6, 2026 Passed
Public breach filing last updated
Pending Active
Potential class action filing
Statutes of limitations vary by state and legal theory, typically one to six years. The Kroll identity monitoring offered in the notice must be activated by January 31, 2027. Waiting can permanently bar your claim.
Possible recovery

Compensation you may be entitled to

Out-of-pocket expenses

Credit freezes, identity restoration services, and other costs incurred responding to the breach.

Time spent monitoring

Hours spent reviewing accounts, disputing fraudulent charges, and dealing with identity theft issues.

Identity theft & fraud losses

Unreimbursed funds stolen from accounts, unauthorized credit lines, new investment or bank accounts opened in your name, or tax refund fraud tied to the breach.

Statutory damages

Certain state data breach and consumer protection statutes provide for fixed damages regardless of actual loss.

Injunctive relief

Court orders requiring Betterment to strengthen its own data security practices and its oversight of the third-party vendors that receive customer information.

Compensation categories depend on applicable state law, the types of data exposed, and documented losses. No recovery is guaranteed.

FAQ

Common questions

I received a data breach letter from Betterment. What should I do? +

Keep the letter, activate the free two-year Kroll identity monitoring before the January 31, 2027 deadline, place a fraud alert or security freeze with Equifax, Experian, and TransUnion, review your bank, brokerage, and credit card statements for unfamiliar activity, and contact a data breach attorney for a free consultation. Because a Social Security number was reported as involved, also watch for tax filings or new accounts opened in your name. Enrolling in the monitoring does not waive your right to sue.

Am I eligible to join a class action against Betterment? +

If you received an August 2026 breach notice connected to the Betterment vendor incident, you are likely eligible for a free case evaluation. Eligibility depends on your state of residence, the categories of your information that were involved, and any losses you have documented. Dapeer Law will review your notice at no cost.

How much money could I receive from a class action lawsuit? +

Data breach class action recoveries vary significantly. Settlements typically range from a few hundred dollars for basic out-of-pocket losses to several thousand dollars for documented identity theft, with class size, damages, and negotiation all affecting the final amount. No payout is guaranteed, and this investigation has not yet resulted in a settlement.

What personal information was exposed in the breach? +

According to the notice Betterment filed with the Massachusetts Attorney General, the file the unauthorized actor accessed contained a name and Social Security number. Betterment states its own systems were not accessed. Your individual letter lists the specific data elements involved for you, so review it carefully.

Did Betterment offer free credit monitoring? +

Yes. Betterment is offering two years of complimentary identity monitoring through Kroll, including single-bureau credit monitoring, fraud consultation, and identity theft restoration services. The notice sets an activation deadline of January 31, 2027. Enrollment is separate from, and does not waive, your right to pursue a claim.

How many people were affected by the Betterment breach? +

Betterment's filing with Massachusetts regulators lists one affected resident of the Commonwealth. The company reported the incident only to Massachusetts, and no nationwide total has been disclosed. This page will be updated as additional information becomes available.

Is there a deadline to take legal action? +

Yes. Statutes of limitations for data breach claims vary by state and legal theory, typically ranging from one to six years. Waiting can permanently bar your claim. Contact us as soon as possible for a free evaluation.

How do I get a copy of the official breach notice? +

The official notice is available from the Massachusetts Attorney General's public data breach reporting page, and the PDF is linked in the Sources section below. If you received a letter but no longer have it, Dapeer Law can help you obtain a copy during your free consultation.

References

Sources & references

Attorney advertising. This page is provided for informational purposes only. It does not constitute legal advice or form an attorney-client relationship. Dapeer Law, P.A. is not affiliated with Betterment Holdings, Inc., Kroll, or any credit bureau. Prior results do not guarantee a similar outcome. All information regarding the data incident is drawn from the official notification filed with Massachusetts Attorney General on August 5, 2026.
Free, confidential case review

Don't let the deadline decide for you. Submit your claim today.

You only have a limited window to act. Our team will review your notice, explain your options, and tell you whether you may be eligible to recover compensation, at no cost to you.

Why Dapeer Law

Practice focusConsumer class actions
Licensed inFL · NY · NJ · IL
Case review fee$0
Response timeSame business day
Free case review
Confidential · 2 minutes
Submit claim →
Previous
Previous

Freeway Insurance Data Breach Lawsuit Investigation

Next
Next

Hamilton Capital Data Breach Lawsuit Investigation