The Estée Lauder Companies
Disclosed Jul 20, 20262 months agoUnverified
Estee Lauder notifies employees of HR data theft via Oracle EBS flaw
Estee Lauder notified employees that attackers exploited Oracle E-Business Suite flaw CVE-2025-61882 in its HR system in August 2025, stealing SSNs, passport numbers, bank details and payroll data. The Clop gang ran the wider campaign.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Jul 20, 2026 |
| Discovered | Jun 19, 2026 |
| Attack | Hacking |
| Data exposed | Names, Addresses, Emails, Dates of birth, Social Security numbers, Government IDs, Financial, Health, Employment |
| Sector | Retail · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Part of | Oracle ebs (2025) |
Sources
| Source | |
|---|---|
| Estee Lauder discloses data breach via Oracle E-Business flawbleepingcomputer.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Jul 20 |
Same campaign
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.