Aura Confirms Voice-Phishing Breach Exposed Nearly 900,000 Records
Summary
Aura confirmed that voice phishing led to unauthorized access to nearly 900,000 records. Exposed data included contact details; Aura says SSNs, passwords and financial information were not compromised. ShinyHunters claimed the theft and leaked files.
Key points
- Aura said a voice-phishing attack targeting an employee led to unauthorized access to a marketing tool’s records.
- The records originated from a company Aura acquired in 2021; Aura said the database included 35,000 of its current and former customers.
- Aura reported that exposed information included names, email addresses, home addresses and phone numbers, but not SSNs, account passwords or financial information.
- ShinyHunters claimed responsibility, said it stole 12GB of files and published leaked files on its extortion site; those claims are attributed to the group.
- Have I Been Pwned analyzed the data and added it to its database, reporting that customer-service comments and IP addresses were also exposed.
- Aura is investigating with external cybersecurity experts, has notified law enforcement and plans to send personalized notices to affected individuals.
Article Details
- Victim Organization
- Aura
- Incident Type
- Voice phishing attack on an employee resulting in unauthorized access to customer records and a data breach
- Data Types Exposed
- Full names
- Email addresses
- Home addresses
- Phone numbers
- Customer service comments (reported by Have I Been Pwned)
- IP addresses (reported by Have I Been Pwned)
- Affected Records
- Aura reported nearly 900,000 records, including approximately 20,000 current and 15,000 former customers. Have I Been Pwned reported a little over 901,000 affected accounts; Aura said its figure was accurate.
- Affected Data Size
- ShinyHunters claimed the leaked files totaled 12GB; this was not confirmed by Aura.
- Operational Impact
- Aura is conducting an internal review with external cybersecurity experts, notified law enforcement, and plans to send personalized notifications to affected individuals. No operational disruption was reported.
- Ransom Or Extortion
- ShinyHunters claimed it made offers to Aura and leaked files after saying no agreement was reached. Aura declined to comment further on the group’s claims.
- Claim Status
- confirmed