Every public data breach

47 disclosed this week · 26,367 on record

LuLu

Disclosed Aug 2, 20242,796,835 accountsUnverified

In July 2024, the Emirati-based LuLu retail store suffered a data breach . The impacted data included 190k email addresses and associated phone numbers which were subsequently shared on a popular hacking forum. The following month, the threat of leaking the full database was carried out and a backup from October 2022 with a further 2.6M unique email addresses appeared. This data also included names, physical addresses, orders and PBKDF2 password hashes.

What is known

People affected2,796,835 (accounts in the leaked data, per Have I Been Pwned)
DisclosedAug 2, 2024
HappenedJul 6, 2024
AttackHacking
Data exposedEmailsNamesPasswordsPhone numbersAddressesFinancial
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Notices filed

History of this record
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about LuLu