Back Gizmodo

The Company Paid to Protect Your Identity Just Got Hacked

Gizmodo • March 19, 2026

This article features deals sourced directly by Gizmodo and produced independently of the editorial team. We may earn a commission when you buy through links on the site.

Aura, which charges over a million customers to keep their identities safe, just had 900,000 records stolen by a hacking group. The breach started with a single phone call.

utes

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Aura Data Breach Exposes 900,000 Customer Records via Phishing Attack Aura, an identity protection company, confirmed a data breach affecting nearly 900,000 customer records due to a voice phishing attack that compromised an employee's credentials. The breach involved data from a marketing tool acquired by Aura in 2021, with the threat group ShinyHunters claiming responsibility and stating they stole 12GB of files. The exposed information includes names, email addresses, physical addresses, and phone numbers for approximately 20,000 current and 15,000 former customers. However, Aura reported that sensitive data such as Social Security Numbers, passwords, and financial information were not accessed. The Have I Been Pwned service indicated that 90% of the exposed email addresses were already known from previous incidents. Aura is conducting an internal review and has notified law enforcement, with affected individuals set to receive personalized notifications. 5 sources 52

The Company Paid to Protect Your Identity Just Got Hacked

The full story

Extracted Entities

Attack Types (1)

Platforms (1)