Every public data breach

44 disclosed this week · 26,355 on record

Aura

Disclosed Mar 18, 2026903,080 accountsConfirmed

Official notice

Aura confirms vishing breach exposing 900,000 marketing contacts

Identity protection firm Aura said a voice phishing attack on an employee exposed a marketing tool from a company it acquired in 2021, holding about 900,000 records, of which about 35,000 belonged to Aura customers. ShinyHunters leaked about 12 GB.

What is known

People affected903,080 (accounts in the leaked data, per Have I Been Pwned)
DisclosedMar 18, 2026
DiscoveredMar 2026
HappenedMar 6, 2026
AttackPhishing
Data exposedEmailsIP addressesNamesPhone numbersAddresses
SectorTech · US
StatusConfirmed
Check your emailHave I Been Pwned

Sources

Notices filed

History of this record
source_type2026-09-25
aggregator to officialby seedSource
source_url2026-09-25
https://haveibeenpwned.com/Breach/Aura to https://www.aura.com/press/release/statement-on-exposure-of-customer-informationby seedSource
country2026-09-25
empty to USby seedSource
attack2026-09-25
unknown to phishingby seedSource
discovered2026-09-25
empty to 2026-03by seedSource
summary2026-09-25
In March 2026, the online safety service Aura disclosed a data breach that exposed 900k unique email addresses . The data was primarily associated with a marketing tool from a previously acquired company, with fewer than 20k active Aura cus to Identity protection firm Aura said a voice phishing attack on an employee exposed a marketing tool from a company it acquired in 2021, holding about 900,000 records, of which about 35,000 belonged to Aura customers. ShinyHunters leaked abouby seedSource
title2026-09-25
empty to Aura confirms vishing breach exposing 900,000 marketing contactsby seedSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned), confirmed by Company page. Record counts are as reported. Not legal advice.

Everything about Aura