Oz Hair and Beauty has confirmed that customers’ personal information was accessed during a data breach after an unauthorized third party briefly gained access to the company’s online purchase and order platform. The company described the Oz Hair and Beauty data breach as a cybersecurity incident and said its investigation found that limited personal information connected to purchases made before August 2026 had been accessed.  

While financial details such as credit card information were not compromised, the exposed data included information that could be used in further fraudulent or unsolicited communications. 

Oz Hair and Beauty Data Breach Involved Customer Information 

In an email sent to customers on Wednesday, Oz Hair and Beauty said the affected information related to purchases made before August 2026. 

According to the notice, the information potentially accessed included customers’ full names and contact details, specifically email addresses and/or mobile phone numbers, as well as details of purchase history. 

The company said purchase-history information could include the currency used for transactions, total spending and broad location information. That location data may include a customer’s city, state, country and postcode. 

Oz Hair and Beauty specifically clarified that personal financial information, including credit card details, was not accessed during the cybersecurity incident. 

The company’s official notice to customers stated: 

“Oz Hair and Beauty recently identified that our online purchase and order platform was briefly accessed by an unauthorized third party (Incident).” 

It added that its investigation had identified that “limited personal information” belonging to customers was accessed during the incident. 

Company Launches Response after Cybersecurity Incident 

Oz Hair and Beauty said it acted immediately after becoming aware of the Oz Hair and Beauty data breach. The company commenced a forensic investigation and introduced containment measures with assistance from senior technical specialists from its cloud e-commerce platform provider. 

The response was aimed at determining what information had been accessed and preventing further unauthorized activity. 

The company also said it had taken additional measures to reduce the likelihood of a similar event occurring in the future. 

“We took immediate steps to commence a forensic investigation and implement containment measures, with the support of senior technical specialists from our cloud e-commerce platform provider,” the company said. 

“Separately, we have undertaken and are undertaking steps to reduce the risk of similar events occurring moving forward. This includes reviewing and enhancing our cybersecurity posture and data retention policies.” 

The company said it was continuing to notify affected customers and was taking what it described as all reasonable steps to support them in accordance with its regulatory obligations. 

“We sincerely regret any inconvenience or concern this Incident has caused,” Oz Hair and Beauty said. 

Customers Warned to Watch for Suspicious Activity 

Following the Oz Hair and Beauty data breach, the company advised customers to remain alert to potentially suspicious communications. 

The warning covers unusual phone calls or emails seeking personal information, payments or proof of identity. Such communications could potentially use legitimate information exposed during the cybersecurity incident to appear more convincing. 

Oz Hair and Beauty also advised customers who receive spam emails to use the relevant spam-reporting features available through their email platforms. The company said marking unwanted messages as spam could help limit the amount of similar correspondence received in the future. 

The company’s notice specifically warned customers to be cautious of: 

“any unusual communications by phone or email requesting information, payments or proof of identity.” The Cyber Express has also reached out to the company to learn more about this incident. We will update this post once we have more information on the breach or any further updates from the company.