Identity protection firm Aura suffers data breach exposing 900 000 records (cyberinsider.com)

Oh sweet, its the service that scam-busting youtubers were advertising as secure way to protect your personal data.

> Aura says a targeted voice phishing attack against one of its employees led to unauthorized access to about 900,000 records [...]

Employers are often surprised when I ask for less access, but I firmly believe no random employee should have personal data access like this. Ideally you'd want to require the customer to be in the loop to access their data as employee.