FullBeauty Brands (NY, United States) notified the Texas Attorney General and the Indiana Attorney General of a data breach on 16 January 2026. It affected 4,725 people. Exposed: Social Security numbers, Health insurance details, Health and medical information and Names. The breach began on 18 October 2025, 90 days before it was reported.
Status
Confirmed breach
People affected
4,725 people
Reported
16 January 2026
Breach began
18 October 2025
Time to tell
90 days (the median in California’s notices over the last year: 154 days)
What was exposed
Social Security numbers
Health insurance details
Health and medical information
Names
What changed since it was first reported
Confirmed breach, 4,725 people (Indiana Attorney General)
Look for FullBeauty Brands, Inc.’s own notice or letter: it should say what of yours was involved. Keep it.
An ID number cannot be changed, so lock it: a credit freeze or fraud alert in the US, a credit warning (kreditadvarsel) on borger.dk in Denmark, Cifas protective registration in the UK.
Check your health insurer’s statements for treatment you never had.
Expect scams that use your details: calls, texts or emails pretending to be FullBeauty Brands, Inc., your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.
Privacy Unpacked