Estée Lauder Companies

Disclosed Jul 10, 20262 months ago31,859 affectedConfirmed

What is known

People affected	31,859 (as reported by the organization)
Disclosed	Jul 10, 2026
Discovered	Jun 19, 2026
Happened	Aug 9, 2025
Attack	Hacking
Data exposed	Social Security numbers, Government IDs, Health, Payment cards, Financial, Dates of birth, Addresses, Names
Sector	Retail · US
Status	Confirmed

Source	Kind
California Attorney General breach notice: Estée Lauder Companiesoag.ca.gov · Official notice	Official notice
Washington Attorney General breach notice: Estée Lauder Companiesatg.wa.gov · Official notice	Official notice
Texas Attorney General data security breach report BR-0005187: Estée Lauder Companiesoag.my.site.com · Official notice	Official notice
Vermont Attorney General breach report: Estee Lauder Companiesago.vermont.gov · Official notice	Official notice

Where	Filed	People
Vermont AGresidents of VT	Jul 10	7
California AGresidents of CA	Jul 17
Washington AGresidents of WA	Jul 17	2,110
Texas AGresidents of TX	Jul 21	1,959

Breach	Disclosed	Attack	Sector	Status	Affected
Disclosed Aug 31, 2023Aug 31, 20233 years agoHacking	Aug 31, 20233 years ago	Hacking	Other	Confirmed	Unknown

History of this record

2026-09-25 · disclosed: 2026-07-17 to 2026-07-10 · backfill source
2026-09-25 · sector: other to retail · backfill source
2026-09-25 · data_types: [] to ["ssn","government-id","health","payment-card","financial","dob","addresses","names"] · backfill source
2026-09-25 · records_basis: empty to organization · backfill source
2026-09-25 · records: empty to 31859 · backfill source
2026-09-25 · attack: unknown to hacking · backfill source
2026-09-25 · discovered: empty to 2026-06-19 · backfill source
2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.