Australian beauty and hair retailer, Oz Hair & Beauty is the latest to suffer a cyber attack, potentially impacting up to two million customers.
The company confirmed that the incident had affected its online purchase and order platform, resulting in some of its customer’s personal data being accessed by an unauthorised third-party.
“We have identified that limited personal information of some customers was accessed as part of this incident. We are directly notifying those customers and provided them with information about the steps they can take to help protect their personal information,” The company said in an email to its customers.
An investigation into the breach identified that limited personal information belonging to some customers was accessed during the incident. Oz Hair and Beauty is contacting affected customers directly to advise them of the incident and provide information about steps they can take to help protect their personal information.
For affected customers who made purchases prior to August 2026, the information involved includes their full name, contact information such as an email address and/or mobile number, and purchase data including currency used, total spend, purchase location and customer creation date.
Importantly, no credit card details, passwords, payment information or invoice details were involved.
Oz Hair and Beauty has reported the incident to the Australian Cyber Security Centre, the Office of the Australian Information Commissioner and the Office of the Privacy Commissioner in New Zealand.
