Loading page…
Sharecare, a digital health company, had data on approximately 318,000 accounts published by the ShinyHunters group following an extortion campaign in August 2026.
According to Have I Been Pwned, in August 2026 the ShinyHunters hacking group targeted Sharecare with a "pay or leak" extortion campaign. When the demand was not met, the group published data it claimed to have taken from Sharecare's systems.
The published data contained around 318,000 unique email addresses. According to HIBP, the majority of records were B2B sales and marketing data including names, physical addresses, phone numbers, job titles, and employer information. A smaller subset of records related to Brazilian health insurance plan members and included dates of birth, genders, marital statuses, and CPF numbers (Brazilian taxpayer identification numbers).
Approximately 318,000 individuals are affected. Most appear to be business contacts from sales and marketing records. A smaller number are Brazilian health insurance plan members whose more sensitive personal and government-issued ID data was also exposed.
If you have ever interacted with Sharecare, monitor your email for phishing attempts, as your contact details may now be in circulation. Brazilian health plan members should be especially vigilant given the exposure of CPF numbers, which can be used for identity fraud. Consider placing a fraud alert with relevant credit bureaus and watch for any suspicious financial or government account activity.