Aura, a company that sells identity theft protection services, has confirmed a data breach involving 900,000 personal information records. Here’s what we know so far, what it means for affected individuals, and what to do to shore up your data security.