SH

Sharecare

Medium

Data exposed in a 2026 Sharecare breach included 318k records mainly of business contacts and some sensitive personal data.

318,185 recordsBreach Aug 12, 2026Updated Oct 12, 2026

Exposed data classes

Fields reported as compromised in this breach record.

Dates of birthEmail addressesEmployersGendersGovernment issued IDsJob titlesMarital statusesNamesPhone numbersPhysical addresses

Detailed Analysis

In-depth analysis of the breach and its implications.

In August 2026, Sharecare, a digital health company, experienced a data breach attributed to the ShinyHunters extortion group. The attackers published approximately 318,185 records containing data primarily pertaining to business-to-business sales and marketing contacts, including names, physical addresses, and phone numbers, among other information. A subset of records belonged to Brazilian health insurance plan participants and included sensitive personal details such as CPF numbers.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
Personal identifiable information from business and health records was potentially exposed.
Business Impact
Trust and reputation might be compromised, alongside legal and regulatory consequences.
Affected Sectors
  • Healthcare
  • Digital Health
  • Marketing
Geographic Impact
  • Brazil
  • Global

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • •Monitor accounts for unauthorized access or misuse.
  • •Notify appropriate data protection authorities if sensitive information is involved.
  • •Consider credit monitoring if financial information might be affected.
  • •Change passwords and enable two-factor authentication.

Preventive Measures

  • •Implement robust data encryption for stored sensitive data.
  • •Regularly audit and secure access to databases.
  • •Establish protocols for rapid breach response and notification.

Frequently Asked Questions

Common questions about this breach and what it means for you.

Exposed data includes names, email addresses, job titles, phone numbers, and CPF numbers of certain individuals.