Breaches and incidentsBriefReported by a reputable outlet, citing the company

Aura: about 900,000 marketing records taken after a vishing attack

About 900,000 records, mostly names and email addresses from a marketing tool from Circle Media Labs (acquired 2021).

Disclosed

What happened

  • About 900,000 records, mostly names and email addresses from a marketing tool from Circle Media Labs (acquired 2021); about 35,000 records also had home addresses and phone numbers. Aura said no financial information, SSNs or passwords were taken.
  • Root cause: voice phishing that gave access to an Aura marketing list.
  • Attributed to ShinyHunters.
  • Disclosed around 19 Mar 2026.

Sources

This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.