High SeverityIdentity Protection / Cybersecurity·March 2026

Aura

Aura, an identity protection and digital privacy company, confirmed a data breach exposing approximately 900,000 marketing contacts. The breach is notable given the company’s core business of protecting customers from identity theft and privacy violations.

Records Affected

Approximately 900,000

Sector

Identity Protection / Cybersecurity

Data types exposed

NamesEmail AddressesMarketing Contact Data

Aura, a company that sells identity theft protection and digital privacy services, confirmed a data breach exposing 900,000 marketing contacts in March 2026.

The exposure of marketing contact data from a company whose entire value proposition centres on protecting customers from data breaches has drawn significant commentary from the security community.

While marketing contact data is less sensitive than the financial or identity data Aura protects for its customers, the incident underscores that no organisation is immune to data security failures, regardless of its industry focus.

Sources

Sources

This alert is based on publicly available breach notification data and reporting. If you are a representative of the affected organisation and believe any information is inaccurate, please contact us at [email protected] and we will review and update this alert promptly.

Protect your organisation from the next breach

Scrutex monitors dark web sources and breach databases continuously, detecting exposure that affects your organisation before it becomes a public incident.