Back Feeds2.Feedburner

900,000 contact records exposed in Aura data breach

Feeds2.Feedburner •Sinisa Markovic • March 19, 2026

Aura, the online safety service, confirmed that an unauthorized party accessed 900,000 records, mostly names and email addresses from a marketing tool linked to a company it acquired in 2021. The incident occurred as a result of a targeted phone phishing attack that tricked one of the employees. Aura believes that information related to less than 20,000 active customers and less than 15,000 former customers was accessed. According to Have I Been Pwned, … More →

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Aura Data Breach Exposes 900,000 Customer Records via Phishing Attack Aura, an identity protection company, confirmed a data breach affecting nearly 900,000 customer records due to a voice phishing attack that compromised an employee's credentials. The breach involved data from a marketing tool acquired by Aura in 2021, with the threat group ShinyHunters claiming responsibility and stating they stole 12GB of files. The exposed information includes names, email addresses, physical addresses, and phone numbers for approximately 20,000 current and 15,000 former customers. However, Aura reported that sensitive data such as Social Security Numbers, passwords, and financial information were not accessed. The Have I Been Pwned service indicated that 90% of the exposed email addresses were already known from previous incidents. Aura is conducting an internal review and has notified law enforcement, with affected individuals set to receive personalized notifications. 5 sources 52

Extracted Entities

900,000 contact records exposed in Aura data breach

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (1)