The hacking group, ShinyHunters, says it's behind the compromise. However, Aura says only marketing lists were breached, not the main identity theft protection application.