
Aura, an identity protection company, released a statement this week confirming a data breach that exposed nearly 900,000 customer records. Those records contained names and email addresses.
According to the statement, the breach was caused by a voice-based phishing attack that gave an unauthorized third-party access to an employee account for "approximately one hour." That exposed the sensitive data of 20,000 current customers and 15,000 former customers.