An extortion group claims it stole and leaked data allegedly tied to digital health company Sharecare, including roughly 318,000 email addresses, mostly business contact records, plus a smaller set of Brazilian health insurance member details with CPF numbers. Sharecare has not confirmed this breach. If you may be affected, monitor your credit reports and watch for phishing attempts referencing your personal details.
| Company | Sharecare |
|---|---|
| Industry | Healthcare |
| Data Types Exposed | Names, Email Addresses, Physical Addresses, Phone Numbers, Job Titles, Employers, Dates of Birth, Genders, Marital Statuses, Government Issued IDs |
| People Affected | 318,000 individuals |
| Attack Method | Extortion/Data Leak Claim |
| Regulators Notified | Not Publicly Disclosed |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Sharecare Data Breach?
Sharecare, a digital health company, is reportedly the target of a data extortion claim. According to the claim, unauthorized access to its network occurred in August 2026. An extortion group says it obtained data from Sharecare’s systems and later published a file it claims came from those systems.
The published dataset reportedly contains roughly 318,000 unique email addresses. Most of the records appear to be business contact information used for sales and marketing purposes. However, a smaller portion reportedly includes sensitive details tied to health insurance plan members in Brazil.
It is important to note that Sharecare has not publicly confirmed this incident. There is no indication in available information that the company has issued a statement, opened a formal investigation, or verified the attacker’s claims. As a result, this report should be treated as an unconfirmed claim rather than an established fact until Sharecare or a regulator confirms the details.
Who was affected?
The individuals named in the leaked dataset appear to fall into two distinct groups. The first and larger group consists of business contacts, such as sales leads and marketing targets, whose professional information may have been included in Sharecare’s B2B records. The second, smaller group reportedly includes members of a Brazilian health insurance plan.
Because Sharecare operates in the digital health space, this incident could touch both US-based business contacts and international consumers. The exact number of affected individuals has not been publicly disclosed beyond the reported 318,000 unique email addresses tied to the leaked file. It also remains unclear how many of those records belong to the health insurance plan members specifically, as opposed to general business contacts.
What Information Was Potentially Exposed?
The claimed leak reportedly spans two different categories of personal data. One set relates to general business contact details, while the other involves more sensitive health-adjacent identifiers. Below is a summary of the data types reportedly included in the leaked file.
- Names
- Email addresses
- Physical addresses
- Phone numbers
- Job titles
- Employers
- Dates of birth
- Genders
- Marital statuses
- Government issued IDs (Brazilian CPF numbers)
For the business contacts included in the dataset, the primary risk involves targeted phishing and spam. Because names, job titles, employers, and contact details were reportedly exposed, scammers could craft convincing business email compromise attempts. This type of fraud often targets employees who look legitimate because the attacker already has real workplace details.
The risk is more serious for the smaller group of Brazilian health insurance members. Government-issued identification numbers, combined with dates of birth, genders, and marital statuses, could enable identity theft or fraudulent account creation. When health insurance details are involved, there is also a possibility of medical identity fraud, where someone uses stolen information to obtain care or file false claims.
What is the company doing?
Because Sharecare has not publicly confirmed the incident, there is no confirmed record of a formal response, investigation, or remediation plan from the company at this time. No notification timeline, credit monitoring offer, or protective service has been publicly announced in connection with this claim.
If Sharecare does confirm the breach or issues a notification in the future, affected individuals would typically be informed through direct notice or a public statement. Until then, individuals who believe they may be impacted should rely on independent monitoring tools and remain cautious with unexpected communications that reference their personal details.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Even though this incident is unconfirmed, it is wise to check your credit reports regularly. You can request free reports from each of the three major credit bureaus and review them for unfamiliar accounts or inquiries.
Because dates of birth and government-issued IDs were reportedly included for some individuals, this step helps catch identity theft early. Catching suspicious activity quickly often limits the financial damage that follows a data exposure.
Consider a Fraud Alert or Credit Freeze
If you believe your information may have been part of this exposure, consider placing a fraud alert on your credit file. This makes it harder for someone to open new credit accounts using your identity.
A credit freeze offers even stronger protection, since it blocks most new credit inquiries entirely. For individuals whose government-issued identification numbers were reportedly exposed, this extra step is a reasonable precaution.
Watch for Phishing and Business Email Scams
Because this leak reportedly includes job titles, employers, and work contact details, phishing attempts may look highly convincing. Be cautious of emails or calls referencing your employer or job role, especially if they request sensitive information or payments.
Always verify unexpected requests through a separate, trusted communication channel. For example, call a known company number directly instead of replying to a suspicious email.
Protect Health-Related Information
If you have a connection to the Brazilian health insurance plan referenced in this claim, pay close attention to your insurance statements and medical records. Unauthorized use of health insurance details can lead to fraudulent claims being filed in your name.
Review any benefits statements for services you do not recognize. In addition, consider contacting your insurer directly to ask whether additional protections or monitoring are available to you.
Consult a Data Breach Attorney
Given the uncertainty around this claim, speaking with a data breach attorney can help clarify your options. Many offer free consultations to review whether your information was affected and what compensation, if any, may be available.
An attorney can also help you track developments as Sharecare responds to these claims. This is especially useful if the company later confirms the incident or notifies affected individuals directly.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.