Find notable cyber news and cases, enriched with sources, timelines, and signals.

Estée Lauder Oracle E-Business Suite personal information leak

Data Leak
First reported
Last updated
Happening score
H score 72
2 unique sources, 2 articles

Summary

Hide ▲

A data leak exposed sensitive personal records tied to Estée Lauder after unauthorized access to its Oracle E-Business Suite used for HR management. The company says the access occurred on or around August 9, 2025, and its investigation determined in June 2026 that an unauthorized third party obtained personal information of certain individuals. The compromised data includes names, addresses, email addresses, dates of birth, SSNs, passport numbers, bank account numbers, health information, and employment information. Estée Lauder is offering 24 months of identity monitoring through Kroll and warning recipients to watch for fraud and suspicious contact.

Related Happenings

Ernst & Young third-party support ticket data leak involving client tax documents

Data Leak
H score30 First: 17.07.2026 17:55 Last: 17.07.2026 17:55 Sources 1

About this happening: Ernst & Young disclosed a data breach after an unauthorized third party accessed a third-party support ticket system used by its IT personnel and downloaded docume...

Tchap public chat data leak

Data Leak
H score52 First: 12.06.2026 10:09 Last: 12.06.2026 10:09 Sources 1

About this happening: The Tchap data leak exposed public-sector user information for 73,467 agents after a compromised user account was used to access non-encrypted public chat rooms. The e...

BlackFile victims' Salesforce and SharePoint data leak

Data Leak
H score35 First: 24.04.2026 21:26 Last: 24.04.2026 21:26 Sources 1

About this happening: BlackFile's stolen documents were published on a dark web leak site, exposing employee and business records taken from Salesforce and SharePoint environments. The...

France Titres ANTS portal user data leak

Data Leak
H score66 First: 24.04.2026 17:31 Last: 24.04.2026 17:31 Sources 1

About this happening: France Titres confirmed a security breach on the ANTS portal that may have exposed millions of users, and a database for sale claim suggests the exposure could be...

ShellForce-affiliated leak site publishes stolen identity, corporate, and résumé records

Data Leak
H score29 First: 09.02.2026 23:14 Last: 09.02.2026 23:14 Sources 1

About this happening: A ShellForce-affiliated leak site is publicly posting stolen identity records, corporate data, and résumé databases, turning intrusions into immediate exposure ris...

Timeline

  1. 21.07.2026 01:39 2 articles · 13d ago

    Unauthorized access to Estée Lauder's Oracle E-Business Suite exposes personal information

    Untyped Phase

    An unauthorized third party gained access to Estée Lauder's Oracle E-Business Suite system used for HR management on or around August 9, 2025 and obtained personal information of certain individuals, including full names, postal addresses, email addresses, dates of birth, Social Security numbers, passport numbers, bank account information, health information, and employment information.

    Show sources
  2. 21.07.2026 01:39 2 articles · 13d ago

    Estée Lauder notifies customers and offers identity monitoring after Oracle E-Business Suite breach

    Initial Disclosure

    On June 19, 2026, Estée Lauder determined through its investigation that an unauthorized third party had gained access to its Oracle E-Business Suite system used for HR management and obtained personal information of certain individuals; the company is notifying recipients of the breach letter, advising them to watch for identity theft and fraud, and offering 24 months of complimentary identity monitoring through Kroll.

    Show sources