Breachesby GlyphOz Hair and Beauty
Disclosed Aug 19, 20261,988,331 accountsUnverified
In August 2026, Australian beauty retailer Oz Hair and Beauty was the target of an xpl0itrs extortion attack . The group subsequently published data allegedly obtained from the company, which included 2M unique email addresses along with names, phone numbers, geographic locations (suburb and postcode) and purchases.
What is known
| People affected | 1,988,331 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Aug 19, 2026 |
| Happened | Aug 15, 2026 |
| Attack | Extortion |
| Data exposed | EmailsLocationNamesPhone numbersFinancial |
| Sector | Retail |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
Notices filed
History of this record
First recordedby backfillSource
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.