ShinyHunters leaks Sharecare data in August 2026 extortion campaign, exposing 318k email addresses
In August 2026, the digital health company Sharecare was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data it claimed was taken from Sharecare's systems, containing 318k unique email addresses. Most of the data consists of B2B sales and marketing records, including names, physical addresses, phone numbers, job titles and employers. The leak also includes a small number of Brazilian health insurance plan members, with dates of birth, genders, marital statuses and CPF numbers. Have I Been Pwned added the breach on 12 Oct 2026.
Technical Details
- Extortion model: "pay or leak", with data published after the demand apparently went unmet.
- Affected addresses: 318.2k.
- Exposed data: email addresses, names, physical addresses, phone numbers, job titles, employers, dates of birth, genders, marital statuses and CPF numbers.
- The article does not state the initial access vector or the intrusion method.
Remediation
- Affected individuals should change passwords on any account where the exposed password was reused, and use a password manager for unique credentials.
- Enable 2FA wherever it is supported.
- Exposed Brazilian members should watch for phishing and identity fraud that abuses CPF and personal details.
Linha do tempo
-
ShinyHunters leaks Sharecare data in August 2026 extortion campaign, exposing 318k email addresses
ler a análise desta fonte ocultar
In August 2026, the digital health company Sharecare was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data it claimed was taken from Sharecare's systems, containing 318k unique email addresses. Most of the data consists of B2B sales and marketing records, including names, physical addresses, phone numbers, job titles and employers. The leak also includes a small number of Brazilian health insurance plan members, with dates of birth, genders, marital statuses and CPF numbers. Have I Been Pwned added the breach on 12 Oct 2026.
Technical Details
- Extortion model: "pay or leak", with data published after the demand apparently went unmet.
- Affected addresses: 318.2k.
- Exposed data: email addresses, names, physical addresses, phone numbers, job titles, employers, dates of birth, genders, marital statuses and CPF numbers.
- The article does not state the initial access vector or the intrusion method.
Remediation
- Affected individuals should change passwords on any account where the exposed password was reused, and use a password manager for unique credentials.
- Enable 2FA wherever it is supported.
- Exposed Brazilian members should watch for phishing and identity fraud that abuses CPF and personal details.