DisclosureLens
FEDERALItem 8.01 · voluntaryUnknownOtherLowActive

THE ESTEE LAUDER COMPANIES INC.

bd_029686f81d388b6c · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jul 19, 2023

To disclose

—

Affected

Not disclosed

Linked

6 filings

Confidence

62%
Full breach record for THE ESTEE LAUDER COMPANIES INC. →5 incidents on file

The Estée Lauder Companies Inc. reported a cybersecurity incident involving an unauthorized third party that gained access to some of the Company's systems; based on the current status of its investigation the Company believes the unauthorized party obtained some data from its systems and is working to understand the nature and scope of that data. The Company took down some of its systems, began an investigation with third-party cybersecurity experts and is coordinating with law enforcement, and states that the incident has caused, and is expected to continue to cause, disruption to parts of its business operations. The filing does not state the data types affected or the number of individuals impacted.

Incident timeline — partial

? — ?

Breach window unknown

Jul 19, 2023

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (2)

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 2 states

View merged incident ↗
SEC 8-KJul 19 · first · this page
Washington State AG+43d
Washington State AG+91d
Maine State AG+92d

Pattern: first filing Jul 19, last Oct 19 (ME) — a 92-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.