So, I have a loose rule of thumb that says if a podcaster is advertising something, that thing is probably a scam.

[missconstrue@mefi.social]

So, I have a loose rule of thumb that says if a podcaster is advertising something, that thing is probably a scam. (Not all podcasters, not all products.) Most of the “identity protection services“ are exactly that. Most of them are owned by data brokers, so...?

Anyway, I tell you that story to tell you this one: Aura has been breached, exposing almost a million records.

The Company Paid to Protect Your Identity Just Got Hacked

Aura, which charges over a million customers to keep their identities safe, just had 900,000 records stolen by a hacking group. The breach started with a single phone call.

Gizmodo (gizmodo.com)

You can check Troy Hunt’s Have I Been Pwned here to see if you’ve been caught up in any of the hundreds of data breaches recently:

Have I Been Pwned: Aura Data Breach

In March 2026, the online safety service Aura disclosed a data breach that exposed 900k unique email addresses. The data was primarily associated with a marketing tool from a previously acquired company, with fewer than 20k active Aura customers affected. Exposed data included names, phone numbers, physical and IP addresses, and customer service notes. Aura advised that no Social Security numbers, passwords or financial information were compromised.

Have I Been Pwned (haveibeenpwned.com)

#dataBreach #infosec #ShinyHunters #vishing #TroyHunt