Back Gbhackers

Aura Confirms Data Breach Exposing 900,000 Customer Records

Gbhackers •Divya • March 19, 2026

Digital security provider Aura has confirmed a data breach affecting approximately 900,000 user records following a targeted social engineering attack. The incident highlights the ongoing threat of sophisticated phishing campaigns aimed at bypassing technical defenses by exploiting human elements within an organization. Aura immediately initiated its incident response protocol upon detecting the unauthorized network activity. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Aura Data Breach Exposes 900,000 Customer Records via Phishing Attack Aura, an identity protection company, confirmed a data breach affecting nearly 900,000 customer records due to a voice phishing attack that compromised an employee's credentials. The breach involved data from a marketing tool acquired by Aura in 2021, with the threat group ShinyHunters claiming responsibility and stating they stole 12GB of files. The exposed information includes names, email addresses, physical addresses, and phone numbers for approximately 20,000 current and 15,000 former customers. However, Aura reported that sensitive data such as Social Security Numbers, passwords, and financial information were not accessed. The Have I Been Pwned service indicated that 90% of the exposed email addresses were already known from previous incidents. Aura is conducting an internal review and has notified law enforcement, with affected individuals set to receive personalized notifications. 5 sources 52

Extracted Entities

Aura Confirms Data Breach Exposing 900,000 Customer Records

The full story

Extracted Entities

Attack Types (2)

MITRE ATT&CK (1)

Platforms (1)