Oz Hair and Beauty
Disclosed Aug 19, 20265 weeks ago1,988,331 accountsUnverified
In August 2026, Australian beauty retailer Oz Hair and Beauty was the target of an xpl0itrs extortion attack . The group subsequently published data allegedly obtained from the company, which included 2M unique email addresses along with names, phone numbers, geographic locations (suburb and postcode) and purchases.
What is known
| People affected | 1,988,331 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Aug 19, 2026 |
| Happened | Aug 15, 2026 |
| Attack | Extortion |
| Data exposed | Emails, Location, Names, Phone numbers, Financial |
| Sector | Retail |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: Oz Hair and Beautyhaveibeenpwned.com · Aggregator | Aggregator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Have I Been Pwnedaccounts in the data | Aug 19 | 1,988,331 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.