Oz Hair and Beauty

DISCLOSED 2026-08-15 · STOLEN CREDS · 1,988,331 RECORDS EXPOSED

In August 2026, Australian beauty retailer Oz Hair and Beauty was the target of an xpl0itrs extortion attack. The group subsequently published data allegedly obtained from the company, which included 2M unique email addresses along with names, phone numbers, geographic locations (suburb and postcode) and purchases.

The record

What we know

Disclosed

2026-08-15

Attack vector

Stolen Creds

Records exposed

1,988,331

Domain

ozhairandbeauty.com

Data classes exposed

Email addressesGeographic locationsNamesPhone numbersPurchases

Sources

Cited reporting

↗ Have I Been Pwned (2026-08-19)

Similar vector · recent

Other stolen creds breaches on file

This page is the permanent ColdRecon entry for the Oz Hair and Beauty disclosure. It updates if new public reporting emerges. All tracked breaches →

Oz Hair and Beauty just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →