ESTEE LAUDER COMPANIES INC

The Estée Lauder Companies based in New York, New York, a business – retail or merchant entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-06-19 and reported on 2026-07-21. 1,959 Texas residents were affected. 31,859 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Government-issued ID number (e.g. passport, state ID card);Financial Information (e.g. account number, credit or debit card number);Medical Information;Other;Date of Birth. Consumers were notified via U.S. Mail.

The Estée Lauder Companies notified the California AG of a data breach involving an unauthorized third party gaining access to their Oracle E-Business Suite HR system on or around August 9, 2025. The incident, discovered via investigation on June 19, 2026, exposed employee personal information including names, addresses, SSNs, passport numbers, bank account numbers, health information, and employment records. The company engaged cybersecurity experts, notified law enforcement, and offered 24 months of identity monitoring via Kroll.

The Estee Lauder Companies reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-07-10. The reporting organization type is Other Commercial. 7 Vermont residents were affected. Categories of data breached: Social Security Numbers, Financial Account Codes, Credit and Debit Account Info, Government ID Numbers, Health Records.

The Estee Lauder Companies disclosed a cybersecurity incident involving its Oracle E-Business Suite HR system. An unauthorized third party gained access on or around August 9, 2025, and the breach was discovered on June 19, 2026. Affected data included names, SSNs, passport numbers, financial account info, health info, and employment records. The company engaged forensic experts, notified law enforcement, and provided 24 months of Kroll identity monitoring to affected individuals.

The Estée Lauder Companies Inc. reported a data breach to the Maine Attorney General, which was discovered on September 20, 2023, and occurred between May 30, 2023, and June 1, 2023. The breach was an external system breach (hacking) that affected one Maine resident, compromising their name and Driver's License or Non-Driver Identification Card Number. The company offered the affected individual two years of complimentary credit monitoring and identity protection services through Kroll.

The Estée Lauder Companies Inc., a business sector entity reported a other incident to the Washington Attorney General. The organization became aware of the incident on 2023-05-31 and filed notice on 2023-10-18. 1,453 Washington residents were affected. 140 days elapsed between awareness and notification. 1 days to identify the breach. 1 days to contain the breach.

The Estée Lauder Companies Inc., a business sector entity reported a other incident to the Washington Attorney General. The organization became aware of the incident on 2023-07-11 and filed notice on 2023-08-31. 150,535 Washington residents were affected. 51 days elapsed between awareness and notification. 0 days to identify the breach. 40 days to contain the breach.

The Estée Lauder Companies Inc. filed an 8-K on July 18, 2023, reporting a cybersecurity incident via an attached press release. The filing does not provide specific details regarding the nature of the incident, data types affected, or number of individuals impacted.

Estée Lauder | Beauty Products, Skin Care & Makeup

The Estée Lauder Companies Inc. is an American multinational cosmetics company, a manufacturer and marketer of makeup, skincare, fragrance and hair care products, based in Midtown Manhattan, New York City. It is the second largest cosmetics company in the world after L'Oréal.

esteelauder.com