Aura, a company that sells identity theft protection and digital privacy services, confirmed a data breach exposing 900,000 marketing contacts in March 2026.
The exposure of marketing contact data from a company whose entire value proposition centres on protecting customers from data breaches has drawn significant commentary from the security community.
While marketing contact data is less sensitive than the financial or identity data Aura protects for its customers, the incident underscores that no organisation is immune to data security failures, regardless of its industry focus.