Aura Customer Service and Marketing Data Incident
The 2026 Aura data incident is a customer-service and marketing-data collection catalogued with a March 6, 2026 date and 903,080 unique emails.
Exposed Data Types
6- Customer service records
- Email addresses
- IP addresses
- Names
- Phone numbers
- Physical addresses
About This Breach
Much of the data is associated with a marketing tool from a previously acquired company; current source metadata does not establish the company and tool names.
The active Aura-customer subset is reported as fewer than 20,000. The 903,080 figure is not unique people, active customers, support requests, trial accounts, or rows containing every field together. There is no local searchable person-level dataset.
The six classes are customer-service records, emails, IPs, names, phones, and physical addresses. Social Security numbers, passwords, and financial data are not classes. A record does not establish identity, Aura customer or trial status, an identity-protection need or support relationship, address or phone ownership, field co-occurrence, or misuse.
Security, subscription, or support requests claiming to represent Aura or an identity-protection service should be verified through an independent official channel without using links in the message.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
