Aura Confirms Data Breach Exposing Nearly 900,000 Customer Contact Records

Aura is a cybersecurity company that provides identity protection and credit monitoring services, with customers relying on it to safeguard personal data and detect fraud risks. The incident stemmed from an employee falling victim to voice phishing, showing how attackers can use social engineering to bypass technical defenses. Although no financial data was involved, the large volume of contact information could still be used for targeted phishing and impersonation scams.

Aura confirmed that nearly 900,000 customer contact records were accessed without authorization, primarily exposing names, email addresses and physical addresses. Available information does not specify when the incident occurred or was disclosed. The company said its identity-protection app database and customers’ financial and credit data were unaffected, and that it had notified law enforcement and launched an investigation.