Estée Lauder Oracle E-Business Suite personal information leak
Data Leak
Summary
Hide ▲
Show ▼
A data leak exposed sensitive personal records tied to Estée Lauder after unauthorized access to its Oracle E-Business Suite used for HR management. The company says the access occurred on or around August 9, 2025, and its investigation determined in June 2026 that an unauthorized third party obtained personal information of certain individuals. The compromised data includes names, addresses, email addresses, dates of birth, SSNs, passport numbers, bank account numbers, health information, and employment information. Estée Lauder is offering 24 months of identity monitoring through Kroll and warning recipients to watch for fraud and suspicious contact.
Related Happenings
Ernst & Young third-party support ticket data leak involving client tax documents
Data Leak
H score30
First: 17.07.2026 17:55
Last: 17.07.2026 17:55
Sources 1
About this happening:
Ernst & Young disclosed a data breach after an unauthorized third party accessed a third-party support ticket system used by its IT personnel and downloaded docume...
Ernst & Young third-party support ticket data leak involving client tax documents
Data LeakAbout this happening: Ernst & Young disclosed a data breach after an unauthorized third party accessed a third-party support ticket system used by its IT personnel and downloaded docume...
Tchap public chat data leak
Data Leak
H score52
First: 12.06.2026 10:09
Last: 12.06.2026 10:09
Sources 1
About this happening:
The Tchap data leak exposed public-sector user information for 73,467 agents after a compromised user account was used to access non-encrypted public chat rooms. The e...
Tchap public chat data leak
Data LeakAbout this happening: The Tchap data leak exposed public-sector user information for 73,467 agents after a compromised user account was used to access non-encrypted public chat rooms. The e...
BlackFile victims' Salesforce and SharePoint data leak
Data Leak
H score35
First: 24.04.2026 21:26
Last: 24.04.2026 21:26
Sources 1
About this happening:
BlackFile's stolen documents were published on a dark web leak site, exposing employee and business records taken from Salesforce and SharePoint environments. The...
BlackFile victims' Salesforce and SharePoint data leak
Data LeakAbout this happening: BlackFile's stolen documents were published on a dark web leak site, exposing employee and business records taken from Salesforce and SharePoint environments. The...
France Titres ANTS portal user data leak
Data Leak
H score66
First: 24.04.2026 17:31
Last: 24.04.2026 17:31
Sources 1
About this happening:
France Titres confirmed a security breach on the ANTS portal that may have exposed millions of users, and a database for sale claim suggests the exposure could be...
France Titres ANTS portal user data leak
Data LeakAbout this happening: France Titres confirmed a security breach on the ANTS portal that may have exposed millions of users, and a database for sale claim suggests the exposure could be...
ShellForce-affiliated leak site publishes stolen identity, corporate, and résumé records
Data Leak
H score29
First: 09.02.2026 23:14
Last: 09.02.2026 23:14
Sources 1
About this happening:
A ShellForce-affiliated leak site is publicly posting stolen identity records, corporate data, and résumé databases, turning intrusions into immediate exposure ris...
ShellForce-affiliated leak site publishes stolen identity, corporate, and résumé records
Data LeakAbout this happening: A ShellForce-affiliated leak site is publicly posting stolen identity records, corporate data, and résumé databases, turning intrusions into immediate exposure ris...
Timeline
-
21.07.2026 01:39 2 articles · 13d ago
Unauthorized access to Estée Lauder's Oracle E-Business Suite exposes personal information
Untyped PhaseAn unauthorized third party gained access to Estée Lauder's Oracle E-Business Suite system used for HR management on or around August 9, 2025 and obtained personal information of certain individuals, including full names, postal addresses, email addresses, dates of birth, Social Security numbers, passport numbers, bank account information, health information, and employment information.
Show sources
- Estée Lauder discloses data breach via Oracle E-Business flaw — www.bleepingcomputer.com — 21.07.2026 01:39
- Estée Lauder discloses data breach via Oracle E-Business flaw — www.bleepingcomputer.com — 21.07.2026 01:39
-
21.07.2026 01:39 2 articles · 13d ago
Estée Lauder notifies customers and offers identity monitoring after Oracle E-Business Suite breach
Initial DisclosureOn June 19, 2026, Estée Lauder determined through its investigation that an unauthorized third party had gained access to its Oracle E-Business Suite system used for HR management and obtained personal information of certain individuals; the company is notifying recipients of the breach letter, advising them to watch for identity theft and fraud, and offering 24 months of complimentary identity monitoring through Kroll.
Show sources
- Estée Lauder discloses data breach via Oracle E-Business flaw — www.bleepingcomputer.com — 21.07.2026 01:39
- Estée Lauder Discloses Impact From Oracle EBS Zero-Day Hack — www.securityweek.com — 21.07.2026 14:12