---
title: "Data breach at LuLu"
description: "In July 2024, LuLu suffered a data breach. 2.8 million accounts were affected. The exposed data includes email addresses, names, passwords, phone numbers, postal addresses and purchase histories."
canonical: https://inyourgeek.com/en/fuites-de-donnees/2024-07-06-lulu
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2024-08-02
dateModified: 2024-08-02
---
# LuLu

Data breach — High

In July 2024, LuLu suffered a data breach. 2.8 million accounts were affected. The exposed data includes email addresses, names, passwords, phone numbers, postal addresses and purchase histories.

| Fact | Value |
| --- | --- |
| Disclosed on | August 2, 2024 |
| Incident dated | July 6, 2024 |
| Accounts affected | 2.8M |
| Sector | Retail |
| Country | International or undetermined |
| Cause | Undisclosed |
| Severity | High |
| Status | Confirmed |

## Exposed data

- Email address
- Full name
- Password (hashed)
- Phone number
- Postal address
- Order history

## What you can do

- Change that password — and everywhere you reused it. That is how a leak spreads to your other accounts.
- Turn on two-factor authentication on the affected accounts: a stolen password is then no longer enough.
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Have I Been Pwned — LuLu](https://haveibeenpwned.com/Breach/LuLu) — Have I Been Pwned (CC BY 4.0)

_Entry built from Have I Been Pwned’s structured data, with no model rewriting._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2024-07-06-lulu
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees