/
← Voltar ao feed
medium retail

Oz Hair and Beauty hit by xpl0itrs extortion attack; 2M customer emails leaked

1 fonte(s) · 1 atualização(ões) · publicado 19/08/2026 00:15 · coletado há 4 dias

In August 2026, Australian beauty retailer Oz Hair and Beauty was targeted in an extortion attack by the group xpl0itrs. The group subsequently published data allegedly stolen from the company. The leak contains roughly 2M unique email addresses along with names, phone numbers, geographic locations (suburb and postcode) and purchase records. The data was added to Have I Been Pwned on 19 Aug 2026.

Detalhes técnicos

  • Attack type: data theft followed by extortion and publication of the data.
  • The article does not state the initial access vector or any technical details of the intrusion.
  • Exposed data: email addresses, names, phone numbers, suburb and postcode, and purchase history.

Remediação

  • Affected customers should change passwords on any account where the affected password was reused, and use a password manager to generate unique passwords.
  • Enable 2FA wherever supported.
  • Be alert to phishing and scam messages that use the exposed contact and purchase details.

Linha do tempo

  1. haveibeenpwned.com ↗ · pub. 19/08/2026 00:15 · coletado 19/10 17:56 primeiro registro

    Oz Hair and Beauty hit by xpl0itrs extortion attack; 2M customer emails leaked

    ler a análise desta fonte

    In August 2026, Australian beauty retailer Oz Hair and Beauty was targeted in an extortion attack by the group xpl0itrs. The group subsequently published data allegedly stolen from the company. The leak contains roughly 2M unique email addresses along with names, phone numbers, geographic locations (suburb and postcode) and purchase records. The data was added to Have I Been Pwned on 19 Aug 2026.

    Technical Details

    • Attack type: data theft followed by extortion and publication of the data.
    • The article does not state the initial access vector or any technical details of the intrusion.
    • Exposed data: email addresses, names, phone numbers, suburb and postcode, and purchase history.

    Remediation

    • Affected customers should change passwords on any account where the affected password was reused, and use a password manager to generate unique passwords.
    • Enable 2FA wherever supported.
    • Be alert to phishing and scam messages that use the exposed contact and purchase details.