The Estée Lauder Companies
Aug 2025 · Graded Verified · Retail and Consumer · Government record
Incident summary
The Estée Lauder CompaniesAug 2025
breach at Oracle
Not yet quantified
VVerifiedEstée Lauder determined that an unauthorized third party gained access to its Oracle E-Business Suite environment and obtained employee-related personal information. The data set reportedly included the identity, financial, health and employment ingredients attackers leverage for future fraud and social engineering campaigns.
Retail and Consumer
Washington AG breach notification
Initial attack type not disclosed · Impact data theft confirmed
About this record
This incident is on the public government record: an SEC 8-K filing or a state-regulator notification, graded Verified. Every figure links to the source it was read from; if we have read one wrong, tell us at info@hackerinahoodie.com. This index never sums figures across incidents. See the methodology.