MakeOver 22 Leak Exposed 5,948 Saudi Arabian Customer Accounts

HEROIC analysts identified a data breach at MakeOver 22, an online cosmetics retailer based in Saudi Arabia, discovered on May 24, 2024. A database tied to the site's customer records was compromised and later surfaced on dark web forums and Telegram channels, affecting 5,948 people. The exposed data included email addresses, phone numbers, first names, and last names.

Why the MakeOver 22 Leak Is Dangerous

No passwords were part of this breach, so account takeover through stolen login credentials is not the immediate concern. The real risk is what a full name paired with an email address and phone number makes possible: convincing, personalized phishing messages. An attacker who knows a customer's real name and that they shop at a specific cosmetics site can craft a text or email that looks like a legitimate order update, promotion, or delivery notice, making the scam far more believable than a generic message.

What Was Exposed in the MakeOver 22 Breach

• Email addresses
• Phone numbers
• First names
• Last names

Why This Matters for Saudi Arabian Shoppers

Because this data is concentrated among customers in Saudi Arabia, it gives attackers a ready-made, localized target list. That combination of a real name, phone number, and email can be used for phishing texts impersonating banks or delivery services, or resold to data brokers who bundle it with other regional leaks to build fuller profiles for identity theft and fraud attempts.

How a Database Breach Like This Happens

The pattern here points to a direct exfiltration from the retailer's customer database, the kind of exposure that typically results from a vulnerability in the website's backend or a security gap in how customer records were stored and accessed. Once an attacker gains that access, exporting an entire table of names, emails, and phone numbers takes very little effort, which is why online retailers remain a frequent target for this type of breach.

Check If You Are Affected

If you have ever placed an order with MakeOver 22, it is worth checking whether your information appeared in this leak. HEROIC's free breach scanner searches a database of more than 400 billion leaked records, so you can quickly find out if your name, email, or phone number has been exposed.