BreachForums Version 5 - 339,778 breached accounts - RedPacket Security

In March 2026, a breach of one of the many iterations of the BreachForums hacking forum known as "Version 5" was publicly disclosed. The incident exposed 340k

RedPacket Security
Scuf Gaming - 128,683 breached accounts - RedPacket Security

In June 2015, custom gaming controller maker Scuf Gaming suffered a data breach. The incident exposed 129k unique email addresses along with usernames,

RedPacket Security
Sound Radix - 292,993 breached accounts - RedPacket Security

In March 2026, the audio production tools company Sound Radix disclosed a data breach that they subsequently self-submitted to HIBP. Attributed to

RedPacket Security
RuneScape Boards - 222,762 breached accounts - RedPacket Security

In around 2011, the now defunct RuneScape Boards forum (also known as RSBoards) suffered a data breach that was later redistributed as part of a larger corpus

RedPacket Security

So, I have a loose rule of thumb that says if a podcaster is advertising something, that thing is probably a scam. (Not all podcasters, not all products.) Most of the “identity protection services“ are exactly that. Most of them are owned by data brokers, so...?

Anyway, I tell you that story to tell you this one: Aura has been breached, exposing almost a million records.

https://gizmodo.com/the-company-paid-to-protect-your-identity-just-got-hacked-2000735410

You can check Troy Hunt’s Have I Been Pwned here to see if you’ve been caught up in any of the hundreds of data breaches recently:

https://haveibeenpwned.com/Breach/Aura

#dataBreach #infosec #ShinyHunters #vishing #TroyHunt

The Company Paid to Protect Your Identity Just Got Hacked

Aura, which charges over a million customers to keep their identities safe, just had 900,000 records stolen by a hacking group. The breach started with a single phone call.

Gizmodo
Aura - 903,080 breached accounts - RedPacket Security

In March 2026, the online safety service Aura disclosed a data breach that exposed 900k unique email addresses. The data was primarily associated with a

RedPacket Security
Baydöner - 1,266,822 breached accounts - RedPacket Security

In March 2026, the Turkish restaurant chain Baydöner suffered a data breach which was subsequently published to a public hacking forum. The incident exposed

RedPacket Security
Divine Skins - 105,814 breached accounts - RedPacket Security

In March 2026, the League of Legends custom skins service Divine Skins suffered a data breach. The incident was disclosed via the service's Discord server,

RedPacket Security
Provecho - 712,904 breached accounts - RedPacket Security

In early 2026, data purportedly sourced from the recipe and meal planning service Provecho was alleged to have been obtained in a breach. The exposed data

RedPacket Security
Lovora - 495,556 breached accounts - RedPacket Security

In February 2026, the couples and relationship app Lovora allegedly suffered a data breach that exposed 496k unique email addresses. The data also included

RedPacket Security