Data breach

Sharecare: a data breach

In August 2026, the digital health company Sharecare was the target of a ShinyHunters "pay or leak" extortion campaign . The group subsequently published data it claimed was taken from Sharecare's systems, containing 318k unique email addresses. Most of the data consisted of B2B sales and marketing records with names, physical addresses, phone numbers, job titles and employers. The data also included a small number of Brazilian health insurance plan members, including dates of birth, genders, marital statuses and CPF numbers (Brazilian taxpayer identification numbers).

The record

Organisation
Sharecare →
Identity
Sharecareidentified by its domain in a verified breach record
Records affected
318,185 records
Data exposed
Dates of birth, Email addresses, Employers, Genders, Government issued IDs, Job titles, Marital statuses, Names, Phone numbers, Physical addresses
Sector
Not recorded
Occurred
2026-08-12
Disclosed
2026-10-12
First recorded here
2026-10-13

Fastnexa security experts

Worried the same could happen to your company?

If you are a customer or supplier of Sharecare, or work in the same industry, a Fastnexa security expert can tell you what this means for your data and test whether the same attack would work on you.

Book a 30-min callWhatsApp us

Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →

Sources (1)

One source so far.

  1. Have I Been Pwned ↗First reported

    2026-10-12