Australian Lingerie Retailer DeBra’s Allegedly Breached by Threat Actor 2019 An Australian women’s lingerie and swimwear retailer, DeBra’s, is reportedly the latest victim of a data breach, with threat actor 2019 claiming to have exfiltrated sensitive customer and order records. The breach was announced earlier this month on a notorious hacking forum, where 2019 alleged the theft of 196,800 customer records and 1.2 million order records. The compromised data reportedly includes names, addresses, phone numbers, email addresses, loyalty program details, transaction histories, and order information. While the threat actor provided a sample to support their claim, the legitimacy of the breach has not been independently verified. Cyber Daily has contacted DeBra’s for comment but has yet to receive a response. Threat actor 2019, active since January 2026, has recently targeted multiple Australian organizations, including MMJ Real Estate, the Melbourne International Film Festival (MIFF), the Australian Centre for the Moving Image (ACMI), and Napoleon Perdis. Notably, Services Australia denied 2019’s claim of breaching Centrelink. The group has also listed victims in the U.S., Italy, France, and New Zealand, often making stolen data available for download to facilitate financial fraud and scams. DeBra’s operates both online and in-store, with a physical location in Penrith, NSW. The potential exposure of customer data raises concerns about identity theft and targeted phishing attacks. Further details on the breach’s impact and verification remain pending.