Notorious hacking group ShinyHunters says it's behind the compromise. Aura says only marketing lists were breached, not the main identity theft protection application.