Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

The Estée Lauder Companies

Disclosed Jul 20, 2026Unverified

Estee Lauder notifies employees of HR data theft via Oracle EBS flaw

Estee Lauder notified employees that attackers exploited Oracle E-Business Suite flaw CVE-2025-61882 in its HR system in August 2025, stealing SSNs, passport numbers, bank details and payroll data. The Clop gang ran the wider campaign.

What is known

People affectedNot stated in the sources we have
DisclosedJul 20, 2026
DiscoveredJun 19, 2026
AttackHacking
Data exposedNamesAddressesEmailsDates of birthSocial Security numbersGovernment IDsFinancialHealthEmployment
SectorRetail · US
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Part ofOracle ebs (2025)

Sources

Newsbleepingcomputer.com
Estee Lauder discloses data breach via Oracle E-Business flaw

Notices filed

TotalJul 20
ResearchCount not stated

Same campaign

Barts Health NHS TrustClop steals Barts Health invoices via Oracle EBS zero-daySupply chainHealthcareGBUnverifiedDec 5, 2025University of PhoenixClop Oracle EBS hack exposes 3.5M University of Phoenix recordsSupply chain3.5M affectedEducationUSDec 2, 2025Dartmouth CollegeClop Oracle EBS attack exposes SSNs of 1,494 Dartmouth individualsSupply chain99K affectedEducationUSNov 24, 2025Cox EnterprisesOracle EBS zero-day breach exposes 9,479 Cox Enterprises peopleSupply chain9,479 affectedMediaUSNov 20, 2025LogitechSupply chain exposed internal documents.Supply chainTechCHNov 14, 2025Washington PostOracle EBS hack exposes Washington Post staff bank and SSN dataSupply chain9,720 affectedMediaUSNov 7, 2025GlobalLogicOracle EBS zero-day breach exposes 10,471 GlobalLogic employeesSupply chain10K affectedTechUSNov 7, 2025Envoy AirClop steals business data from American Airlines' Envoy via Oracle EBSSupply chainTransportUSUnverifiedOct 17, 2025Harvard UniversityHarvard alumni and donor data stolen in Oracle EBS and phishing attacksHacking851K accountsEducationUSOct 13, 2025OracleClop exploits Oracle E-Business Suite zero-day to steal data from dozensSupply chainTechUSOct 2, 2025
History of this record
Added2026-09-25
First recordedby seedSource

First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.

Everything about The Estée Lauder Companies