What to Do After the Sharecare Data Breach (2026)

If your email turned up in the Sharecare data breach, change your Sharecare password and any reused passwords, turn on two-factor authentication, and expect targeted phishing that uses your name, employer and job title. The leaked file holds 318,185 email addresses. It is mostly business contact records, so the main risk is convincing work-themed scams, not stolen card numbers.

What Happened in the Sharecare Breach

Sharecare is a US digital health and wellbeing company that also runs the AskMD symptom checker. In August 2026, the extortion group ShinyHunters claimed an attack on Sharecare as part of its "pay or leak" campaign, which hit several companies through their cloud CRM data. When no payment came, the group published data it said came from Sharecare's systems.

Have I Been Pwned (HIBP) verified the leaked data and added it to its database on October 12, 2026. HIBP counts 318,185 unique email addresses. The attackers had claimed more than 3.4 million Salesforce records, but that figure counts CRM rows, not unique people, and nobody has verified it independently. As of this writing, Sharecare has not published a public statement on the incident.

What data was exposed

According to HIBP's analysis, most of the leak is B2B sales and marketing records. That means it covers people Sharecare sold to or marketed to, such as HR and benefits staff at employers, health plan contacts and partners. These records include:

• Names and email addresses
• Phone numbers and physical (often business) addresses
• Job titles and employers

A smaller set of records belongs to members of Brazilian health insurance plans. These also include dates of birth, genders, marital status and CPF numbers, which are Brazilian taxpayer IDs. HIBP lists these as government-issued IDs.

How to Check If You Were Affected

Go to haveibeenpwned.com and enter every email address you use, especially your work address. A Sharecare entry means your record was in the leaked file. If you were a Sharecare app user, a benefits administrator or a vendor contact, also watch your inbox for any official notice from Sharecare. The attackers have not leaked passwords, so treat any message that asks you to "re-verify" your Sharecare login as suspicious.

Step 1: Secure Your Sharecare and Work Accounts

Change your Sharecare password even though no passwords were reported in the leak. If you used that password anywhere else, change it there too, starting with your work email, payroll and benefits portals. Use a password manager so every account gets a unique password.

Step 2: Turn On Two-Factor Authentication

Turn on two-factor authentication (2FA) for your email, benefits, banking and Microsoft or Google work accounts. Use an authenticator app or a passkey instead of SMS where you can. ShinyHunters is known for voice-phishing help desks and employees to get past logins, and phishing-resistant 2FA blocks most of those attempts.

Step 3: Watch for Targeted Phishing and Vishing

This leak works like a sales prospecting list for criminals. Expect messages that:

• Pretend to be Sharecare, your health plan or your benefits provider and ask you to "confirm" employee data
• Use your real job title and employer to pose as a colleague, vendor or IT support
• Arrive as phone calls asking you to approve an MFA prompt or reset a password
• Pretend to be a breach notice or settlement offer with a link to a "claim" form

Our guide to recognizing and avoiding phishing scams covers the warning signs. Fake breach letters are common after a leak like this, so read how to spot fake breach notifications before you click anything.

Step 4: Remove Your Personal Data From Data Brokers

A leaked work record becomes much more dangerous once a scammer links it to your home address, personal phone number and relatives. People-search sites sell exactly that link for a few dollars. Removing your profiles from those sites cuts the bridge between the Sharecare leak and your personal life. You can do it by hand broker by broker, or use one of the best data removal services to handle it continuously.

Step 5: Brazilian Plan Members, Protect Your CPF

If you were a member of a Brazilian health plan linked to Sharecare, your CPF number may be exposed. Watch for loan applications, new phone lines or bank accounts opened in your name. Check your CPF status with Brazil's credit registries and report any fraud to your bank and the police right away.

How This Fits the 2026 ShinyHunters Campaign

Sharecare is one of many companies caught in this year's wave of CRM data theft. The same campaign has been linked to leaks from Carhartt, Baxter and Cook Medical. Our explainer on how ShinyHunters operates and our guide to the 2026 Salesforce breach wave explain why business contact data keeps leaking and what you can do about it. If you were also caught in the Carhartt data breach, the same steps apply.

Protect Yourself Before the Next Leak

You can't control which vendor gets breached next, but you can control how much of your personal data is available to combine with the leak. PrivacyOn removes your information from 100+ data broker and people-search sites, monitors 24/7 to catch new listings, and alerts you when your email shows up on the dark web. Family plans cover up to 5 people, starting at $8.33/month.

Frequently Asked Questions

Was there a Sharecare data breach in 2026?

Yes. ShinyHunters claimed an attack on Sharecare in August 2026 and later published the data. Have I Been Pwned verified the leak and added 318,185 unique email addresses on October 12, 2026. Sharecare had not issued a public statement when this guide was written.

What information was leaked in the Sharecare breach?

Mostly B2B sales and marketing records: names, email addresses, phone numbers, physical addresses, job titles and employers. A small number of Brazilian health plan members also had dates of birth, genders, marital status and CPF numbers exposed. Passwords and payment cards were not reported.

Were Sharecare medical records exposed?

Have I Been Pwned's analysis does not list medical records or health conditions. The attackers claimed to have internal corporate data as well, so watch for an official Sharecare notice if you are a patient or app user.

How do I know if my data was in the Sharecare leak?

Enter your personal and work email addresses at haveibeenpwned.com. If Sharecare appears in the results, your record was in the leaked file. Set up HIBP notifications so you hear about future breaches too.

Is there a Sharecare data breach class action lawsuit?

Law firms have said they are investigating possible claims, but an investigation is not a lawsuit or a settlement. Be wary of emails offering Sharecare settlement money. Real settlements are announced through court-approved claim administrators.

What is the best way to protect myself after the Sharecare breach?

Secure your accounts with unique passwords and 2FA, treat work-themed calls and emails with suspicion, and remove your personal details from data brokers so scammers can't connect your leaked work record to your home. PrivacyOn automates that removal across 100+ brokers and adds dark web monitoring, with a free scan to start.