Aura hit by network compromise
Incident
Summary
Hide ▲
Show ▼
Aura confirmed a voice-phishing breach that gave an unauthorized party access to customer records, exposing data tied to 20,000 current and 15,000 former customers. The compromise matters because the exposed records included names, email addresses, home addresses, and phone numbers. Aura said the affected data came from a marketing tool linked to an acquired business and that it is notifying impacted people.
Related Happenings
Zara customer data leak exposing 197,400 people
Data Leak
First: 08.05.2026 13:42
Last: 08.05.2026 13:42
Sources 1
About this happening:
The **Zara** customer-data leak now exposes **197,400 people**, creating privacy and phishing risk across multiple markets. The exposed records include **unique email addresses**,...
Zara customer data leak exposing 197,400 people
Data LeakAbout this happening: The **Zara** customer-data leak now exposes **197,400 people**, creating privacy and phishing risk across multiple markets. The exposed records include **unique email addresses**,...
Instructure user personal information breach
Data Leak
First: 04.05.2026 01:16
Last: 04.05.2026 01:16
Sources 1
About this happening:
Instructure confirmed a **data breach** that exposed **users' personal information**, putting students, teachers, and staff at risk across affected institutions. The exposed mater...
Instructure user personal information breach
Data LeakAbout this happening: Instructure confirmed a **data breach** that exposed **users' personal information**, putting students, teachers, and staff at risk across affected institutions. The exposed mater...
Vercel customer environment variables compromise
Data Leak
First: 21.04.2026 12:10
Last: 21.04.2026 12:10
Sources 1
About this happening:
**Vercel** confirmed that a **limited subset of customers** had **non-sensitive environment variables** compromised after an attacker abused access tied to an employee account. Th...
Vercel customer environment variables compromise
Data LeakAbout this happening: **Vercel** confirmed that a **limited subset of customers** had **non-sensitive environment variables** compromised after an attacker abused access tied to an employee account. Th...
Aura customer data exposed after Aura breach
Data Leak
First: 19.03.2026 00:56
Last: 19.03.2026 00:56
Sources 1
How related:
Identity protection company Aura has confirmed that an authorized party gained access to nearly 900,000 customer records containing names and email addresses.
About this happening:
Aura confirmed a **data leak** that exposed nearly **900,000 customer records**, creating privacy and phishing risk for affected customers. The exposed set included **names**, **e...
Aura customer data exposed after Aura breach
Data LeakHow related: Identity protection company Aura has confirmed that an authorized party gained access to nearly 900,000 customer records containing names and email addresses.
About this happening: Aura confirmed a **data leak** that exposed nearly **900,000 customer records**, creating privacy and phishing risk for affected customers. The exposed set included **names**, **e...
ShinyHunters Salesforce Experience Cloud misconfiguration campaign
Campaign
First: 10.03.2026 12:00
Last: 10.03.2026 12:00
Sources 1
About this happening:
ShinyHunters is running an **active** **Salesforce Experience Cloud** campaign that exploits overly permissive guest-user settings to harvest data from **hundreds of companies**,...
ShinyHunters Salesforce Experience Cloud misconfiguration campaign
CampaignAbout this happening: ShinyHunters is running an **active** **Salesforce Experience Cloud** campaign that exploits overly permissive guest-user settings to harvest data from **hundreds of companies**,...
Latest development: 16.04.2026 13:35
ShinyHunters leaked data tied to McGraw Hill after breaching the company's Salesforce environment earlier this month, and McGraw Hill said the intrusion exposed a limited set of data from a webpage hosted by Salesforce on its platform while not affecting its Salesforce accounts, courseware, customer databases, or internal systems. Have I Been Pwned said more than 100GB of files later appeared publicly and contained data linked to 13.5 million accounts.
Timeline
-
19.03.2026 00:56 2 articles · 2mo ago
Aura confirms customer-record exposure
Initial DisclosureAura confirmed that an authorized party accessed nearly 900,000 customer records containing full names, email addresses, home addresses, and phone numbers after a voice phishing attack targeted an employee. The company said the data came from a marketing tool tied to a business acquired in 2021, said SSNs, account passwords, and financial information were not compromised, and said it is conducting an internal review with external cybersecurity experts, informing law enforcement, and preparing personalized notifications for affected individuals.
Show sources
- Aura confirms data breach exposing 900,000 marketing contacts — www.bleepingcomputer.com — 19.03.2026 00:56
- Aura confirms data breach exposing 900,000 marketing contacts — www.bleepingcomputer.com — 19.03.2026 00:56