Skip to content

LuLu

Disclosed Aug 2, 20242 years ago2,796,835 accountsUnverified

In July 2024, the Emirati-based LuLu retail store suffered a data breach . The impacted data included 190k email addresses and associated phone numbers which were subsequently shared on a popular hacking forum. The following month, the threat of leaking the full database was carried out and a backup from October 2022 with a further 2.6M unique email addresses appeared. This data also included names, physical addresses, orders and PBKDF2 password hashes.

What is known

People affected2,796,835 (accounts in the leaked data, per Have I Been Pwned)
DisclosedAug 2, 2024
HappenedJul 6, 2024
AttackHacking
Data exposedEmails, Names, Passwords, Phone numbers, Addresses, Financial
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Source
Have I Been Pwned: LuLuhaveibeenpwned.com · Aggregator

Notices filed

WhereFiledPeople
Have I Been Pwnedaccounts in the dataAug 2, 20242,796,835
History of this record
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about LuLu

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.