Aura confirms data breach exposing 900,000 marketing contacts

Aura confirmed an unauthorized access incident stemming from a voice‑phishing attack that exposed roughly 900,000 marketing contacts and limited customer records (including names, emails, home addresses, and phone numbers). The cybercrime actor ShinyHunters claimed responsibility and published leaked files; Have I Been Pwned added the dataset to its archive. Aura says sensitive financial data and SSNs were not compromised, is conducting an internal and third‑party investigation, and has notified law enforcement.