Identity protection firm Aura suffers data breach exposing 900 000 records

> Aura says a targeted voice phishing attack against one of its employees led to unauthorized access to about 900,000 records [...]

Employers are often surprised when I ask for less access, but I firmly believe no random employee should have personal data access like this. Ideally you'd want to require the customer to be in the loop to access their data as employee.

Oh sweet, its the service that scam-busting youtubers were advertising as secure way to protect your personal data.