Skin Care Manufacturer, Malin + Goetz, Hit in Cyberattack

October 4, 2026

INCIDENT

New York, New York-based personal care product manufacturer Malin + Goetz suffered a cyberattack in May where personally identifiable information ended up stolen in the hack.
“On June 15, 2026, we received confirmation from a third-party service provider relating to a potential compromise on our website which we were investigating,” the company said in a notice to victims. “The investigation into the activity identified unauthorized code on our site that may have captured certain information entered on the checkout/payment page, at times between May 22, 2026 and June 10, 2026.”
As a result of the investigation, the company took immediate action to analyze the transactions identified as at risk and determine which customers’ information the threat actor could have taken. Once the company determined that, they would notify them.

Incident Date

May 22, 2026

Estimated Cost

Unknown at this time

Type of Malware

No Malware identified

Threat Source

No threat source identified