Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesiTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
There were three separate security incidents involving SoundCloud, Crunchbase and Betterment—not one confirmed breach affecting all three. SoundCloud said an unauthorized actor accessed limited data, Crunchbase confirmed that documents were taken from its corporate network, and Betterment said social engineering exposed contact information but not customer accounts or login details. ShinyHunters claimed responsibility, but the available company statements do not confirm the group carried out all three incidents.
What happened at each company?
| Company | Company confirmation | Information reportedly exposed | Known versus unknown scale |
|---|---|---|---|
| SoundCloud | SoundCloud said an unauthorized actor accessed limited data through an ancillary service dashboard. | Email addresses and information already visible on public profiles; SoundCloud said passwords and financial data were not accessed. | BleepingComputer estimated roughly 28 million accounts, based on a reported 20% share. SoundCloud did not confirm an exact count. |
| Crunchbase | Crunchbase confirmed that a threat actor exfiltrated certain documents from its corporate network and said the incident was contained and systems were secure. | Certain documents; the company did not publish a confirmed inventory of their contents. | No exact number of records or documents was stated in the company confirmation. |
| Betterment | Betterment said social engineering on January 9, 2026 enabled access to certain systems through third-party marketing and operations platforms. | Contact information; for some people, this was accompanied by an address, phone number or birthdate. Betterment said customer accounts and login details were not compromised. | The company did not state how many customers’ contact information was affected. |
These incidents have different evidence and measures of scale. A company-confirmed document theft, a media estimate of accounts, and an unspecified number of affected contacts cannot be combined into a reliable total.
Was my SoundCloud account affected?
SoundCloud’s public statement described the accessed information as email addresses and profile information that was already publicly visible. It said financial and password data were not accessed. BleepingComputer reported that the actor may have accessed 20% of users and estimated roughly 28 million accounts, but that figure was the outlet’s estimate—not a count confirmed by SoundCloud. The company did not publish an exact number of affected accounts.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchSoundCloud’s statement was reported on December 15, 2025. It described unauthorized activity involving an ancillary service dashboard; the reporting does not establish a broader compromise of SoundCloud’s core service. For account-specific guidance, follow SoundCloud’s statement as reported by BleepingComputer.
#1 Best Overall
What information did ShinyHunters steal?
The answer differs by company, and “stole” should be read as an allegation or company-described incident rather than a single verified haul attributed to ShinyHunters.
- SoundCloud: The company said limited data—email addresses and publicly visible profile information—was accessed. It said passwords and financial data were not accessed.
- Crunchbase: The company confirmed exfiltration of certain documents from its corporate network. It did not publish a confirmed list of document contents or a count.
- Betterment: The company said contact information was affected, and that for a subset it was accompanied by addresses, phone numbers or birthdates. It said customer accounts and login information were not compromised.
Betterment said the intruder used identity impersonation and deception to reach systems through third-party platforms used for marketing and operations, then sent a fraudulent message about cryptocurrency to some customers. That message was not a legitimate Betterment investment offer.
Were passwords or financial details exposed?
For SoundCloud, the company said password and financial data were not accessed. Betterment’s forensic investigation found no customer accounts, passwords or login information compromised. The published Crunchbase statement confirms that documents were exfiltrated but does not specify their contents, so it does not establish whether those documents included passwords or financial details.
Did Betterment customer accounts get hacked?
Betterment said its forensic investigation found no customer accounts or login information compromised. Its January 12, 2026 update said an unauthorized individual gained access to certain Betterment systems through social engineering on January 9. The company said access was revoked and an investigation was underway. Its February 3 update described the contact-information impact; it did not give an affected-customer count.
Betterment also reported intermittent website and app outages on January 13 due to a DDoS attack, with access fully restored at 2:40 PM ET. That availability incident was separate from the earlier unauthorized access and fraudulent message. Betterment’s incident updates are available on its customer update page.
How many Crunchbase records were leaked?
Crunchbase has not publicly stated an exact number of affected records or documents in the company confirmation cited here. It said a threat actor exfiltrated certain documents from its corporate network, that the incident was contained, and that its systems were secure. BleepingComputer reported the statement on January 23, 2026, but a claimed count or leak-site listing is not equivalent to a company-verified record total.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Is ShinyHunters confirmed to be behind the breaches?
No. BleepingComputer reported ShinyHunters’ claims and the group’s leak-site listings involving these companies. But the available company confirmations do not establish that ShinyHunters carried out all three incidents. The SoundCloud reporting attributed responsibility based on a tip, rather than an attribution by SoundCloud. BleepingComputer also described ShinyHunters’ claimed SSO voice-phishing activity; that broader account does not prove the same method was used against every company.
The Crunchbase incident and ShinyHunters’ claims were reported by BleepingComputer on January 23, 2026. Treat the group’s claimed counts and attribution as claims, not independently verified totals or findings.
Quick Recap
What should affected customers do?
- If you receive a crypto-related message claiming to be from Betterment, do not treat it as an official investment offer. Check current guidance through Betterment’s customer update page rather than replying to the message or following its links.
- For SoundCloud or Betterment account concerns, use the relevant company’s official channels for current, account-specific guidance. The reported exposure descriptions do not indicate that passwords were accessed, but they do not replace company advice for an individual account.
- For Crunchbase, the public company statement cited here does not provide an affected-record count or detailed inventory. Consult the company’s current communications for any notice relevant to you.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
