Aura Confirms Data Breach Exposing 900,000 Customer Records

Aura confirmed a data breach after a targeted phone phishing attack against an employee allowed an unauthorized actor one hour of access; roughly 900,000 records from a legacy marketing database (names and emails) plus under 35,000 active/former customer contact records were exposed. Rapid detection, session termination, strong encryption, and role-based access controls limited the impact and prevented theft of highly sensitive data; the company engaged forensics, legal counsel, and law enforcement and is notifying affected individuals.