LuLu

LuLu

Data Breach

www.luluhypermarket.com

190,512

Records Exposed

Jul 2024

Date of Breach

Database

Breach Type

Oct 2024

Added to Database

About This Breach

In July 2024, the Emirati-based LuLu retail store experienced a significant data breach. Initially, 190,000 email addresses along with associated phone numbers were exposed and circulated on a well-known hacking forum. The situation escalated in the following month when the complete database was leaked, containing a backup from October 2022. This backup included 2.6 million unique email addresses, in addition to sensitive information such as names, physical addresses, order details, and PBKDF2 password hashes. Such incidents highlight the critical importance of implementing strong cybersecurity measures to safeguard customer data from exposure and misuse.

Compromised Data Types

Email Address Phone Number First Name Last Name Password Hash

Country

United Arab Emirates

Language

Arabic

Password Storage

Other

Category

Shopping

Indexed On

Oct 10, 2024

Breach Type

Database

What Should You Do?

Get Full Breach Details with LeakedSource Pro

Sign up for a LeakedSource Pro account to see exactly what data was exposed in this breach and get real-time notifications when your information appears in new breaches.

Sign Up for Pro
  • Change your password immediately on LuLu and any other site where you used the same password. Use a unique, strong password for each account.
  • Watch for phishing emails targeting your inbox. Attackers may use your exposed email address to send convincing scam messages.
  • Be alert to smishing attacks (SMS phishing). Scammers may text you pretending to be banks or service providers.
  • Enable two-factor authentication (2FA) on all important accounts to add an extra layer of security.
  • Use a password manager to generate and store unique, strong passwords for every account.

Were You Affected by This Breach?

Enter your email below to instantly check if your data was compromised in the LuLu breach and 12,000+ other known breaches.