Data breach
Aura data breach
In 2026, Aura suffered a data breach affecting 87,436 records. Exposed data included names, surnames, email addresses and 3 other types of data.
Breach date
87 436
Records in the breach
6
Types of data exposed
Were you affected by the Aura breach?
Enter your email address to see whether it appears in this breach — or any of the other breaches in Leak Database.
Data exposed in the Aura breach
- Names
- Surnames
- Email Addresses
- Phone Numbers
- Addresses
- Service Notes
About the breach
In March 2026, the digital safety and identity protection company Aura disclosed a data breach that exposed approximately 900,000 unique records.
What Happened
• Cause: An unauthorized party gained access to a single Aura employee's corporate account for less than an hour via a targeted phone phishing (vishing) attack.
• Attributed Group: The hacking group ShinyHunters claimed responsibility for the incident.
• Core App Uncompromised: Aura stated that its main online safety app, core identity monitoring databases, and encrypted vaults were not breached.
What Data Was Exposed
• Primary Leak: The bulk of the exposed data (~900,000 records) consisted of names and email addresses tied to a marketing tool from Circle Media Labs, Inc. (a company Aura acquired in 2021).
• Customer Impact: Fewer than 20,000 active Aura customers and around 15,000 former customers had more detailed contact fields exposed, including phone numbers, physical addresses, and customer service notes.
• What Was Safe: Aura confirmed that no Social Security numbers (SSNs), passwords, or financial account information were compromised.
What Happened
• Cause: An unauthorized party gained access to a single Aura employee's corporate account for less than an hour via a targeted phone phishing (vishing) attack.
• Attributed Group: The hacking group ShinyHunters claimed responsibility for the incident.
• Core App Uncompromised: Aura stated that its main online safety app, core identity monitoring databases, and encrypted vaults were not breached.
What Data Was Exposed
• Primary Leak: The bulk of the exposed data (~900,000 records) consisted of names and email addresses tied to a marketing tool from Circle Media Labs, Inc. (a company Aura acquired in 2021).
• Customer Impact: Fewer than 20,000 active Aura customers and around 15,000 former customers had more detailed contact fields exposed, including phone numbers, physical addresses, and customer service notes.
• What Was Safe: Aura confirmed that no Social Security numbers (SSNs), passwords, or financial account information were compromised.
How to protect yourself
In order to protect yourself, we recommend the following:
1. Monitor your credit report for any suspicious activities. If you cannot do this yourself, make use of any service that does this on your behalf.
2. Be on the lookout for an increase in number of spam or scam calls and emails. We recommend you make use of Apps like True Caller, which can assist you in identifying any possible spam or scam calls.
3. Be sure to monitor your bank account transactions. Ensure you receive real time notifications on any transaction.
1. Monitor your credit report for any suspicious activities. If you cannot do this yourself, make use of any service that does this on your behalf.
2. Be on the lookout for an increase in number of spam or scam calls and emails. We recommend you make use of Apps like True Caller, which can assist you in identifying any possible spam or scam calls.
3. Be sure to monitor your bank account transactions. Ensure you receive real time notifications on any transaction.
Get told about the next breach
A free Leak Database account emails you when your address appears in a newly added breach.