Skip to content

Aura

Disclosed Mar 18, 20266 months ago903,080 accountsConfirmed

Official notice

Aura confirms vishing breach exposing 900,000 marketing contacts

Identity protection firm Aura said a voice phishing attack on an employee exposed a marketing tool from a company it acquired in 2021, holding about 900,000 records, of which about 35,000 belonged to Aura customers. ShinyHunters leaked about 12 GB.

What is known

People affected903,080 (accounts in the leaked data, per Have I Been Pwned)
DisclosedMar 18, 2026
DiscoveredMar 2026
HappenedMar 6, 2026
AttackPhishing
Data exposedEmails, IP addresses, Names, Phone numbers, Addresses
SectorTech · US
StatusConfirmed
Check your emailHave I Been Pwned

Sources

Source
Have I Been Pwned: Aurahaveibeenpwned.com · Aggregator
Aura disclosureaura.com · The organization
Aura confirms data breach exposing 900,000 marketing contactsbleepingcomputer.com · News

Notices filed

WhereFiledPeople
Have I Been Pwnedaccounts in the dataMar 18903,080
ResearchtotalMar 18
History of this record
  • 2026-09-25 · source_type: aggregator to official · seed source
  • 2026-09-25 · source_url: https://haveibeenpwned.com/Breach/Aura to https://www.aura.com/press/release/statement-on-exposure-of-customer-information · seed source
  • 2026-09-25 · country: empty to US · seed source
  • 2026-09-25 · attack: unknown to phishing · seed source
  • 2026-09-25 · discovered: empty to 2026-03 · seed source
  • 2026-09-25 · summary: In March 2026, the online safety service Aura disclosed a data breach that exposed 900k unique email addresses . The data was primarily associated with a marketing tool from a previously acquired company, with fewer than 20k active Aura cus to Identity protection firm Aura said a voice phishing attack on an employee exposed a marketing tool from a company it acquired in 2021, holding about 900,000 records, of which about 35,000 belonged to Aura customers. ShinyHunters leaked abou · seed source
  • 2026-09-25 · title: empty to Aura confirms vishing breach exposing 900,000 marketing contacts · seed source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned), confirmed by Company page. Record counts are as reported. Not legal advice.

Everything about Aura

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.