Important Update About A Cyber Incident

Oz Hair and Beauty recently identified that our online purchase and order platform was briefly accessed by an unauthorised third party.

As soon as we became aware of the incident, we took immediate steps to commence a forensic investigation and implement containment measures, with the support of senior technical specialists from our cloud e-commerce platform provider.

We have identified that limited personal information of some customers was accessed as part of this incident. We are directly notifying those customers and provided them with information about the steps they can take to help protect their personal information.

We have also reported the Incident to the Australian Cyber Security Centre, the Office of the Australian Information Commissioner and the Office of the Privacy Commissioner (New Zealand).

If you have any queries, please contact us by email at privacy@ozhairandbeauty.com

Commonly asked questions

Has this incident been contained?

We took immediate steps to contain the incident as soon as we became aware, with the support of senior technical specialists from our e-commerce provider. 

Is it safe to use the Oz Hair and Beauty website now?

Yes. We have taken steps to secure our systems and there is no reason customers cannot continue to use our website and app as normal.

Was my information accessed?

If your personal information was affected, we will contact you directly by email to confirm this and to explain what to do next, if we have not contacted you already. If you do not receive an email from us by Saturday, 22nd August 2026, it means we haven't identified your information as impacted based on our investigation to date.

What information was accessed?

For customers who made purchases prior to August 2026, the information involved includes full name, contact information (email address and/or mobile number), and purchase data (currency used, total spend, purchase location and customer creation date). Importantly, the information involved does not include any credit card details, passwords, payment information or invoice details.

How do you know this won't happen again?

We are undertaking a review of our cyber security posture and data retention policies, and implementing enhancements identified through that review, to reduce the risk of a similar incident occurring in future.

How do I know the notification email is genuine, and not a phishing attempt?

Our notification will never ask you to click a link to enter your password, payment details or other sensitive information. If you're ever unsure whether a communication claiming to be from us is genuine, please don't click any links, and contact us directly at privacy@ozhairandbeauty.com to confirm before responding.