Headz.cc Breach: 10,000 Canadian Cannabis Shop Customers Exposed

In October 2025, HEROIC identified 10,000 records from Headz.cc, a Canada-based e-commerce platform specializing in mail-order cannabis products. The data was shared on a prominent cybercrime forum and contained email addresses, full names, and phone numbers belonging to Headz.cc customers.

Why the Headz.cc Breach Is Dangerous

Attackers with access to customer names, email addresses, and phone numbers from a cannabis retailer can use the data for targeted phishing, SIM-swapping attacks to seize phone-based accounts, and social engineering campaigns. The sensitive nature of the industry makes this breach particularly harmful to those who value privacy around their purchases.

What Was Exposed in the Headz.cc Leak

• Email addresses
• First and last names
• Phone numbers

Why This Headz.cc Data Puts You at Risk

Personal information such as names, emails, and phone numbers is routinely used in identity verification and account recovery processes. Attackers combine this data to perform SIM swaps, reset account passwords on linked services, and run targeted phishing campaigns. Publication on a cybercrime forum means the data is actively traded and used by multiple threat actors.

How Database Breaches Work

Database breaches occur when attackers exploit vulnerabilities in a web application to extract stored customer records. The data is then shared on cybercrime forums where it is bought, sold, and used for fraud and social engineering. In the Headz.cc breach, customer records were posted to a prominent forum, putting affected customers at immediate risk from the moment of disclosure.

Check If Your Data Was Exposed

HEROIC operates one of the world's largest breach databases, covering more than 400 billion leaked records. Use HEROIC's free breach scanner to check if your email address or credentials appeared in the Headz.cc leak or thousands of other breaches in our database.