ESTEE LAUDER COMPANIES INC
bd_addb107ce7f34766 · schema v1 · pii pii-v1
Full breach record for ESTEE LAUDER COMPANIES INC →The Estée Lauder Companies based in New York, New York, a business – retail or merchant entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-06-19 and reported on 2026-07-21. 1,959 Texas residents were affected. 31,859 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Government-issued ID number (e.g. passport, state ID card);Financial Information (e.g. account number, credit or debit card number);Medical Information;Other;Date of Birth. Consumers were notified via U.S. Mail.
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_2fec812c019f031dCalifornia State AGfiled 2026-07-17(4d gap)Candidate
- bd_eccf3e0cae9b9b66Vermont State AGfiled 2026-07-10(11d gap)Verified
- bd_ed3611601cbbcae4Massachusetts State AGfiled 2026-07-01(20d gap)Verified
Source provenance
- Source URL
- https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage#BR-0005187
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 21, 2026
- Raw hash
- 77db8c5edabd090463aeb52f74ca13277fab9c5953e2c0dbeace2041e78ad328
Reporting entity
- Name
- ESTEE LAUDER COMPANIES INCnorm: estee lauder companies
- Domain
- esteelauder.com
Victim entity
- Name
- ESTEE LAUDER COMPANIES INCnorm: estee lauder companies
- Domain
- esteelauder.com
- Industry
- Otherllm
Incident
- Discovered
- Jun 19, 2026
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 1,959
- Data types
- IDENTITY_GOVERNMENTPHIPII
- Attack vector
- Unknown
- Threat actor
- External
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- TX AG >30d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.