Sharecare data breach: 318K accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2026-10-12
In August 2026, the digital health company Sharecare was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data it claimed was taken from Sharecare's systems, containing 318k unique email addresses. Most of the data consisted of B2B sales and marketing records with names, physical addresses, phone numbers, job titles and employers. The data also included a small number of Brazilian health insurance plan members, including dates of birth, genders, marital statuses and CPF numbers (Brazilian taxpayer identification numbers). Exposed data: dates of birth, email addresses, employers, genders, government issued ids, job titles, marital statuses, names, phone numbers, physical addresses. The breach dates from Aug 12, 2026; Have I Been Pwned loaded it on Oct 12, 2026.
What to do
- If you had a Sharecare account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
