Zero Radar
← feed
MediumData breachHIBP-Sharecareupdated 25 Oct 2026, 13:32 UTC

Sharecare data leaked by extortion group, 318k email addresses exposed

A hacking group stole records from the health company Sharecare and published them online. Names, emails, phone numbers and addresses of many people may now be public, which can lead to spam and scam messages.

Official source
SeverityMediumData breach
Being exploited?UnclearNo reports either way yet
What to doCheck exposureTreat unexpected messages referencing Sharecare or your health plan as suspicious and verify them through official channels before acting.
How sure is this?Official sourceBacked by an official source

What happened

In August 2026, the digital health company Sharecare was targeted in a ShinyHunters 'pay or leak' extortion campaign, and the group published data it claimed was taken from Sharecare's systems, including 318k unique email addresses.

Why it is dangerous: Exposed contact and personal details can be used for phishing, targeted scams and identity fraud. Business contacts and a small number of Brazilian health insurance members, including people whose CPF numbers were exposed, are at risk.

Are you affected?

You are affected if your name, email, phone, address, job details or (for a few Brazilian health plan members) date of birth and CPF number were in the Sharecare records that were published.

Package / productAffected versionsFixed in
sharecare.comsee advisoryno fix yet

What to do

  1. Be wary of unexpected emails, calls or texts that mention Sharecare, health plans or account problems, and do not click links in them
  2. Check whether your email is in a breach checker such as Have I Been Pwned
  3. Watch for phishing attempts, and enable multi-factor authentication on important accounts
  4. If your CPF was exposed, monitor your financial and health insurance accounts for unusual activity

Timeline

  1. 12 Oct 2026, 23:28 UTC
    Publicly disclosed
  2. 12 Oct 2026, 23:28 UTC
    Reported by Have I Been Pwned · Have I Been Pwned

Sources 1 report, oldest first

Official vendor, government CERT or advisory database

Technical details

ID
HIBP-Sharecare
Disclosed
12 Oct 2026, 23:28 UTC
On Zero Radar
before the radar started
Last change
25 Oct 2026, 13:32 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

Sharecare data leaked by extortion group, 318k email addresses exposed · Zero Radar