ShinyHunters Allegedly Breaches Sharecare, Exposing 3.4 Million Salesforce Records
On August 13, 2026, the hacker group ShinyHunters claimed responsibility for a cyberattack on Sharecare, a digital healthcare support company serving patients, providers, employers, and insurers. The breach allegedly exposed over 3.4 million Salesforce records containing personally identifiable information (PII).
Reports from dark web monitoring platforms, including Ransomware.live, confirmed the group’s involvement, though details about the scope and nature of the exposed data remain unconfirmed. Sharecare, which also operates AskMD, has not yet released an official statement on the incident.
Legal teams, including those affiliated with ClassAction.org, are investigating the breach to determine whether a class action lawsuit can be filed. Attorneys are seeking individuals including current and former employees, patients, and partners who believe their data may have been compromised. Potential claims could address privacy violations, financial losses, and other damages.
As of August 17, 2026, no further details on the breach’s impact or remediation efforts have been disclosed. The incident underscores ongoing risks in healthcare data security.
Source: https://www.classaction.org/data-breach-lawsuits/sharecare-august-2026
Sharecare cybersecurity rating report: https://www.rankiteo.com/company/sharecare-inc
"id": "SHA1787001872",
"linkid": "sharecare-inc",
"type": "Breach",
"date": "8/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '3.4 million',
'industry': 'Healthcare',
'name': 'Sharecare',
'type': 'Company'}],
'data_breach': {'number_of_records_exposed': '3.4 million',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personally Identifiable '
'Information (PII)'},
'date_detected': '2026-08-13',
'date_publicly_disclosed': '2026-08-13',
'description': 'On August 13, 2026, the hacker group ShinyHunters claimed '
'responsibility for a cyberattack on Sharecare, a digital '
'healthcare support company serving patients, providers, '
'employers, and insurers. The breach allegedly exposed over '
'3.4 million Salesforce records containing personally '
'identifiable information (PII). Reports from dark web '
'monitoring platforms, including Ransomware.live, confirmed '
'the group’s involvement, though details about the scope and '
'nature of the exposed data remain unconfirmed. Sharecare, '
'which also operates AskMD, has not yet released an official '
'statement on the incident.',
'impact': {'data_compromised': '3.4 million Salesforce records',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential class action lawsuit',
'systems_affected': 'Salesforce'},
'investigation_status': 'Ongoing',
'references': [{'date_accessed': '2026-08-17', 'source': 'Ransomware.live'},
{'date_accessed': '2026-08-17', 'source': 'ClassAction.org'}],
'regulatory_compliance': {'legal_actions': 'Potential class action lawsuit'},
'threat_actor': 'ShinyHunters',
'title': 'ShinyHunters Allegedly Breaches Sharecare, Exposing 3.4 Million '
'Salesforce Records',
'type': 'Data Breach'}