Cosmetic’s Giant Estée Lauder Suffers Breach

July 20, 2023


Cosmetics giant Estée Lauder admitted Tuesday a hacker stole some data from its systems, with the cyber incident causing disruption in its business operations.
The cosmetics maker is continuing to work on restoring the affected systems and implemented measures to secure its operations, including taking down some of its systems to mitigate the incident, the company said in a statement.
As a part of the incident two ransomware actors, ALPHV/BlackCat and Clop, listed Estée Lauder on their data leak sites as a victim of separate attacks. In a message to the company, the BlackCat gang said they were still present on the network, according to a published report.
In a Security Exchange Commission (SEC) filing Tuesday, Estée Lauder confirmed one of the attacks saying the threat actor gained access to some of its systems and may have stolen data.
Further information on the attack was not immediately available. But the company did say it took down some systems to prevent attackers from expanding on the network.

Incident Date

July 18, 2023

Estimated Cost

unknown at this time


Type of Malware

No Malware identified