{
  "schemaVersion": 1,
  "incident": {
    "id": "breach-sharecare-d3a2e58b4b05c04fad62d0694e6db2e1",
    "url": "https://cveboard.org/i/breach-sharecare-d3a2e58b4b05c04fad62d0694e6db2e1",
    "urlPt": "https://cveboard.org/pt/i/breach-sharecare-d3a2e58b4b05c04fad62d0694e6db2e1",
    "json": "https://cveboard.org/i/breach-sharecare-d3a2e58b4b05c04fad62d0694e6db2e1.json",
    "kind": "breach",
    "live": true,
    "knownExploited": false,
    "severity": null,
    "title": "Sharecare data breach",
    "summary": "In August 2026, the digital health company Sharecare was the target of a ShinyHunters \"pay or leak\" extortion campaign. The group subsequently published data it claimed was taken from Sharecare's systems, containing 318k unique email addresses. Most of the data consisted of B2B sales and marketing records with names, physical addresses, phone numbers, job titles and employers. The data also included a small number of Brazilian health insurance plan members, including dates of birth, genders, marital statuses and CPF numbers (Brazilian taxpayer identification numbers).",
    "titlePt": "Vazamento de dados da Sharecare",
    "summaryPt": "Em agosto de 2026, a empresa de saúde digital Sharecare foi alvo de uma campanha de extorsão \"pague ou vazamos\" do grupo ShinyHunters. O grupo publicou em seguida dados que alegou ter sido retirado dos sistemas da Sharecare, contendo 318k endereços de e-mail únicos. A maioria dos dados consistia em registros de vendas e marketing B2B com nomes, endereços físicos, números de telefone, títulos de emprego e empregadores. Os dados também incluíam um pequeno número de membros de planos de seguro saúde brasileiros, incluindo datas de nascimento, gêneros, estados civis e números de CPF (números de identificação fiscal brasileiros).",
    "cves": [],
    "ghsa": null,
    "cvss": null,
    "epss": null,
    "packages": [],
    "vendor": "Sharecare",
    "product": null,
    "kev": null,
    "breach": {
      "domain": "sharecare.com",
      "breachDate": "2026-08-12",
      "pwnCount": 318185,
      "dataClasses": [
        "Dates of birth",
        "Email addresses",
        "Employers",
        "Genders",
        "Government issued IDs",
        "Job titles",
        "Marital statuses",
        "Names",
        "Phone numbers",
        "Physical addresses"
      ],
      "verified": true,
      "stealerLog": false,
      "malware": false
    },
    "retracted": false,
    "sources": [
      {
        "label": "Have I Been Pwned",
        "url": "https://haveibeenpwned.com/Breach/Sharecare"
      }
    ],
    "publishedAt": "2026-10-12T23:28:32.000Z",
    "updatedAt": "2026-10-12T23:28:32.000Z"
  },
  "live": true,
  "events": [
    {
      "id": "hibp:Sharecare:hibp_added:2026-10-12T23:28:32.000Z",
      "incidentId": "breach-sharecare-d3a2e58b4b05c04fad62d0694e6db2e1",
      "type": "hibp_added",
      "at": "2026-10-12T23:28:32.000Z",
      "detail": {
        "pwnCount": 318185,
        "breachDate": "2026-08-12"
      }
    }
  ]
}