Digital health company Sharecare was hit by a ShinyHunters “pay or leak” extortion campaign in August 2026. After the ransom demand, the group published data it attributed to Sharecare containing roughly 318,000 unique email addresses. The bulk of the exposed records were B2B sales and marketing data — names, physical addresses, phone numbers, job titles, and employer details.
A smaller but more sensitive subset included Brazilian health insurance plan members, with dates of birth, genders, marital statuses, and CPF taxpayer identification numbers. This combination of contact data and government identifiers raises the risk of targeted phishing, identity fraud, and social engineering against affected individuals.
What to take away: Leaked email addresses and personal identifiers like these frequently feed credential-stuffing and spear-phishing campaigns that target enterprise identities. Organizations whose staff appear in such B2B dumps should watch for targeted phishing and reinforce MFA and account monitoring.