Unverified claim — July 13, 2026: A cybercrime-forum actor calling themselves "2019" claims to have stolen and listed for sale more than 200,000 customer records from Australian online toner retailer Hot Toner Australia. Hot Toner had not confirmed any matching incident at indexing time.
What is being claimed
Trade reporting describes a forum post advertising names, email addresses, phone numbers, and purchasing histories allegedly taken from Hot Toner Australia's e-commerce database. Sample rows were reportedly shown to lend credibility — a common tactic that may mix real and recycled data.
Hot Toner sells printer cartridges and supplies to consumers and small businesses across Australia. A genuine dump of order history plus contact data is valuable for invoice fraud (“pay this overdue toner order”) and credential-stuffing against reused passwords.
What is not confirmed
No company breach notice, Australian regulator bulletin, or authenticated forensic review had validated the listing when this was indexed. Forum actors routinely inflate row counts or rebrand old Australian retail leaks with a fresh logo.
Action items if you shop at Hot Toner
- Do not buy or download alleged databases from forums — illegal, often malware-laced, and frequently fake.
- Change your Hot Toner password and any site where you reused it.
- Watch for phishing referencing real order numbers or product names from past purchases.
- Monitor payment cards used on the site for small test charges.
Canonical record: Hot Toner Australia 2026 claim on BreachHistory — indexed as unverified.