All Breaches
Oz Hair and Beauty Data Breach
Australian beauty and haircare retailer Oz Hair and Beauty suffered a data extortion attack in August 2026 carried out by the threat group xpl0itrs. Following an extortion attempt, customer repository files were disseminated publicly.
2 Million
Reported Records
5
Data Types
Critical
Severity
Oct 20, 2026
Last updated
Exposed Data Types
5- Email addresses
- Geographic locations
- Names
- Phone numbers
- Purchases
About This Breach
The compromised repository contains 1,988,331 unique email addresses alongside customer names, phone numbers, postal regions, and purchase transaction records. The company affirmed that payment card processing is managed off-platform and that full card data remained uncompromised.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
