Estée Lauder data breach via Oracle E-Business Suite (Cl0p campaign)
Cosmetics group Estée Lauder disclosed that attackers exploiting an Oracle E-Business Suite flaw accessed its HR system in August 2025, exposing Social Security numbers, passport and bank details, health data and employment records.
- Victim
- The Estée Lauder Companies Inc.