Sharecare data breach
318,185 accounts exposed in a breach on 12 August 2026.
At a glance
318,185
Accounts exposed
12 August 2026
Date of the breach
12 October 2026
Added to Have I Been Pwned
What happened
In August 2026, the digital health company Sharecare was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data it claimed was taken from Sharecare's systems, containing 318k unique email addresses. Most of the data consisted of B2B sales and marketing records with names, physical addresses, phone numbers, job titles and employers. The data also includ
What was exposed
- Dates of birth. Dates of birth were exposed. They help criminals prove they are you, and they cannot be changed.
- Email addresses. Email addresses were exposed. Expect more spam and phishing aimed at those addresses.
- Employers. Employer names were exposed. Scammers use them to pretend to be a colleague or the workplace.
- Genders. Genders were exposed. On its own it is low risk, but it adds to a profile of you.
- Government issued IDs. Government identity details were exposed. Identity theft is the main risk, so contact the issuer of the document.
- Job titles. Job titles were exposed. Scammers use them to aim a message at the right person.
- Marital statuses. Marital status was exposed. On its own it is low risk, but it adds to a profile of you.
- Names. Names were exposed. Scammers use real names to make a message look personal.
- Phone numbers. Phone numbers were exposed. Expect scam calls and text messages, some of them pretending to be the organisation.
- Physical addresses. Home or postal addresses were exposed. They can be used to make a scam letter or a fake identity look real.
What to do now
It depends on what was exposed, so these steps follow the list above.
If identity documents or numbers were exposed
- Contact the organisation that issued the document (for example the passport office or the licensing authority) and ask what to do.
- Contact your national identity theft or cyber support service for help with identity theft (for example IDCARE in Australia and New Zealand).
- Watch for credit enquiries or accounts you did not open.
If your contact details were exposed
- Expect more spam, scam calls and phishing. Do not click links or open attachments in messages you did not expect.
- If a message mentions this breach, do not reply. Go to the organisation's own website or app instead of using a link in the message.
Whatever was exposed
- Check your own email address and phone number at haveibeenpwned.com to see which other breaches include you.
- Keep an eye on your accounts for a few months. Breached data is often used long after the breach.
- If you think someone is using your details, report it to the organisation and to your national cyber crime reporting service.
Check your own exposure
- Have I Been Pwned: type your email address to see which breaches include it.
- Password leak check: find out whether a password has appeared in a breach. The password never leaves your browser.
- Free domain security scan: grade the email, DNS and website security of a domain you own.
Related breaches
Other breaches that exposed some of the same kinds of data.
Glendale Community College
In June 2026, Glendale Community College was the target of a ShinyHunters "pay or leak" extortion campaign.
- Academic records
- Dates of birth
- Email addresses
- Genders
- +4 more
Read what happened
Moody Bible Institute
In June 2026, Moody Bible Institute was targeted by a ShinyHunters "pay or leak" extortion campaign.
- Dates of birth
- Email addresses
- Genders
- Marital statuses
- +3 more
Read what happened
JCPenney
In June 2026, retailer JCPenney and associated brands were targeted in a ShinyHunters "pay or leak" extortion campaign.
- Dates of birth
- Email addresses
- Government issued IDs
- Job titles
- +4 more
Read what happened