Aura has confirmed a data breach that exposed nearly 900,000 records containing names and email addresses after an employee was targeted in a voice phishing attack.
The company said the incident affected data from a marketing platform linked to a firm it acquired in 2021. Among the exposed records were details of about 20,000 current and 15,000 former customers.
The cybercrime group ShinyHunters claimed responsibility, alleging it stole 12GB of data, including personally identifiable information and corporate files, later leaking the data after failed negotiations.
Aura stated that compromised information includes names, email addresses, phone numbers, and home addresses, but confirmed that sensitive data such as Social Security numbers, passwords, and financial details were not affected.
The breach data has also been added to Have I Been Pwned, which reported additional exposure of IP addresses and customer service notes. It noted that most of the leaked email addresses had already appeared in previous breaches.
Aura is currently investigating the incident with external cybersecurity experts, has notified law enforcement, and plans to inform affected individuals directly.
Comments