2-Spyware Sharecare Suffers Data Breach Affecting 318,185 Accounts
Article Content
- •Sharecare's data breach involved 318,185 accounts, primarily B2B records.
- •The breach was part of a ShinyHunters extortion campaign with sensitive personal data leaked.
- •Affected users should enable two-factor authentication and be cautious of phishing attempts.
In August 2026, Sharecare, a digital health company, was targeted by the ShinyHunters group in a 'pay or leak' extortion campaign. The attackers published data claiming to be from Sharecare's systems, which included 318,185 unique email addresses and extensive B2B sales and marketing records. Among the leaked data were personal details of a small number of Brazilian health insurance plan members, such as dates of birth and CPF numbers. The breach highlights the risks associated with sensitive health data and the potential for targeted phishing attacks against affected individuals. Sharecare has not confirmed the breach's specifics, but the data leak raises concerns about identity fraud and phishing attempts. Users are advised to enable two-factor authentication and remain vigilant against suspicious communications.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Sharecare in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What type of data was leaked?
How can I protect myself after this breach?
Has Sharecare confirmed the breach?
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…