DisclosureLens
UnknownOtherFinancial accountHealth (basic)Government IDMedium

THE ESTEE LAUDER COMPANIES INC.

bd_fea9064666f821a3 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jun 19, 2026

Filed

Jul 1, 2026

To disclose

—

Affected

Withheld by the regulator

Linked

9 filings

Confidence

95%
Full breach record for THE ESTEE LAUDER COMPANIES INC. →5 incidents on file

THE ESTÉE LAUDER COMPANIES filed a data-breach notice with the Illinois Attorney General in July 2026 (case 26-07-1322). The register records the breach as discovered on June 19, 2026. Personal information types reported: financial account number, medical information, passport number, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Leak gap clock✗ Leak >180d
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

Jun 19, 2026

Discovered

Jul 1, 2026

Filed

This filing is one of 9 about the same incident.View merged incident
A leak claim by cl0p about this victim predates this filing by 221 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (7) · sorted by filing gap

Show 3 more filings ↓up to 20d gap

Filing propagation · 8 filings · 8 states

View merged incident ↗
Illinois State AGJul 1 · first · this page
Vermont State AG+9d
California State AG+16d
Washington State AG+16d
Nebraska State AG+16d
Massachusetts State AG+16d
New Hampshire State AG+19d
Texas State AG+20d

Pattern: first filing Jul 1 (IL), last Jul 21 (TX) — a 20-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.