BEUTiFi Data Breach
The 2022 BEUTiFi data breach occurred in December 2022 when unauthorized actors accessed and exfiltrated the customer database of BEUTiFi (beutifi.com), an Ireland-based online marketplace and booking platform for hair and beauty salon appointments.
Exposed Data Types
3- Email addresses
- Passwords
- Geographic locations
About This Breach
The compromise exposed registered user accounts, encrypted authentication secrets, and country demographics.
What information was affected in the BEUTiFi incident?
The leaked customer export (clients.csv) encompasses individual client records across the platform. The incident affected 126,946 unique individuals, compromising the following categories of personal data:
- Contact Details: Canonical email addresses.
- Security Credentials: Cryptographic password hashes alongside individual salt values.
- Geographic Demographics: Registered country location (primarily Ireland and the United Kingdom).
How many accounts were affected?
Rigorous deduplication and canonical verification confirmed 126,946 unique canonical email addresses extracted from 126,967 raw client entries.
Technical analysis and security risks
The leak originates from an unauthorized dump of the platform's core user identity directory. While passwords benefit from unique salt strings, simpler passphrases remain vulnerable to automated hash recovery techniques. Furthermore, the combination of verified email addresses and salon booking interests enables high-converting targeted phishing simulations impersonating wellness services or appointment confirmations.
Recommended actions for affected users
Users who held an account or booked services through BEUTiFi should:
- Immediately change passwords across any personal accounts where the BEUTiFi password was reused.
- Exercise skepticism towards unsolicited emails claiming to offer beauty discounts or appointment rescheduling links.
- Adopt a secure password manager and activate multi-factor authentication (MFA) on primary email accounts.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
