Estee Lauder Companies IncData breach involving personal information of customers, leading to potential regulatory and reputational damage.

Estée Lauder Companies disclosed a data security incident involving personal information of some customers. The cosmetics company became aware of a cybersecurity issue involving a vulnerability in the Oracle E-Business Suite system, which it uses for HR management purposes. An unauthorized third party gained access to that system and obtained personal information of certain individuals. After learning of the issue, Estée Lauder quickly launched an investigation, worked with leading outside cybersecurity experts to determine the nature and scope of the issue and impacted information, and notified law enforcement authorities. The company said it has put in place additional safeguards to further protect the system.
Estee Lauder Companies IncData breach involving personal information of customers, leading to potential regulatory and reputational damage.