RuneScape Boards - 222,762 breached accounts - RedPacket Security

In around 2011, the now defunct RuneScape Boards forum (also known as RSBoards) suffered a data breach that was later redistributed as part of a larger corpus

RedPacket Security

So, I have a loose rule of thumb that says if a podcaster is advertising something, that thing is probably a scam. (Not all podcasters, not all products.) Most of the “identity protection services“ are exactly that. Most of them are owned by data brokers, so...?

Anyway, I tell you that story to tell you this one: Aura has been breached, exposing almost a million records.

https://gizmodo.com/the-company-paid-to-protect-your-identity-just-got-hacked-2000735410

You can check Troy Hunt’s Have I Been Pwned here to see if you’ve been caught up in any of the hundreds of data breaches recently:

https://haveibeenpwned.com/Breach/Aura

#dataBreach #infosec #ShinyHunters #vishing #TroyHunt

The Company Paid to Protect Your Identity Just Got Hacked

Aura, which charges over a million customers to keep their identities safe, just had 900,000 records stolen by a hacking group. The breach started with a single phone call.

Gizmodo
Aura - 903,080 breached accounts - RedPacket Security

In March 2026, the online safety service Aura disclosed a data breach that exposed 900k unique email addresses. The data was primarily associated with a

RedPacket Security
Baydöner - 1,266,822 breached accounts - RedPacket Security

In March 2026, the Turkish restaurant chain Baydöner suffered a data breach which was subsequently published to a public hacking forum. The incident exposed

RedPacket Security
Divine Skins - 105,814 breached accounts - RedPacket Security

In March 2026, the League of Legends custom skins service Divine Skins suffered a data breach. The incident was disclosed via the service's Discord server,

RedPacket Security
Provecho - 712,904 breached accounts - RedPacket Security

In early 2026, data purportedly sourced from the recipe and meal planning service Provecho was alleged to have been obtained in a breach. The exposed data

RedPacket Security
Lovora - 495,556 breached accounts - RedPacket Security

In February 2026, the couples and relationship app Lovora allegedly suffered a data breach that exposed 496k unique email addresses. The data also included

RedPacket Security
Quitbro - 22,874 breached accounts - RedPacket Security

In February 2026, the porn addiction app Quitbro allegedly suffered a data breach that exposed 23k unique email addresses. The data also included users’ years

RedPacket Security
KomikoAI - 1,060,191 breached accounts - RedPacket Security

In February, the AI-powered comic generation platform KomikoAI suffered a data breach. The incident exposed 1M unique email addresses along with names, user

RedPacket Security
Odido - 6,077,025 breached accounts - RedPacket Security

In February 2026, Dutch telco Odido was the victim of a data breach and subsequent extortion attempt. Shortly after, a total of 6M unique email addresses were

RedPacket Security