International Cosmetics & Perfumes notified California regulators of a data security incident occurring between April 29 and May 18, 2020. Phishing attacks compromised employee email accounts, potentially exposing customer personal information including names, addresses, SSNs, and financial data. The company engaged law enforcement and forensic experts, terminated access, and offered credit monitoring services.