Aura breach confirmed as over 900,000 customer records accessed in phishing attack

Around 20,000 current, and 15,000 former customers affected