Oz Hair and Beauty — data breach (OzHairAndBeauty)

Domain: ozhairandbeauty.com · Accounts affected: 1,988,331 · Data exposed: Email addresses, Geographic locations, Names, Phone numbers, Purchases · Verified breach — In August 2026, Australian beauty retailer Oz Hair and Beauty was the target of an xpl0itrs extortion attack. The group subsequently published data allegedly obtained from the company, which included 2M unique email addresses along with names, phone numbers, geographic locations (suburb and postcode) and purchases.