Oz Hair and Beauty recently identified that our online purchase and order platform was briefly accessed by an unauthorised third party (Incident).
From our investigations into the Incident, we are disappointed to have identified that limited personal information of yours was accessed during the Incident.
Actions we have taken
As soon as we became aware of the incident, we took immediate steps to commence a forensic investigation and implement containment measures, with the support of senior technical specialists from our cloud e-commerce platform provider.
We have also reported the Incident to the Australian Cyber Security Centre, the Office of the Australian Information Commissioner and Office of the Privacy Commissioner (New Zealand).
Separately, we have and are undertaking steps to reduce the risk of similar events occurring moving forward. This includes reviewing and enhancing our cybersecurity posture and data retention policies.
Information Accessed
We are informing you of your personal information that was subject to unauthorised access as part of the Incident based on our investigations, and the steps you can take to protect yourself.
The impacted personal information relates to purchases made prior to August 2026 and includes:
full name
contact information, being your email address and / or mobile number
details of your purchase history with Oz Hair and Beauty (being currency used for purchases, total spend, purchase city, state, country and postcode but importantly does not include any credit card details, passwords, payment information or invoice details).
Actions you can take
Oz Hair and Beauty recommends that you take the following steps to minimise any potential risk to your personal information:
remain vigilant and monitor for any suspicious activity, particularly any unusual communications by phone or email requesting information, payments or proof of identity;
if you have received a spam email, there may be options within your email platform that allows you to mark spam email, which can assist to limit the extent to which such spam email is received in the future. To help limit receipt of any further spam emails, we recommend blocking the sender of each email as it is received.
Further information about online safety, cyber security and other helpful tips can be found at the Australian Cyber Security Centre website, the ACCC’s Scamwatch website or the National Cyber Security Centre
Additional Information
We are continuing to notify customers and are taking all reasonable steps to support everyone, in accordance with our regulatory obligations. We sincerely regret any inconvenience or concern this Incident has caused.
If you have any queries, please contact us by email at privacy@ozhairandbeauty.com