Estée Lauder Customer Information Stolen in Data Breach

Estée Lauder, the company behind cosmetics brands like Clinique, MAC, and La Mer, is notifying customers about a data breach. Hackers exploited a security flaw in Oracle E-Business Suite software that the company used for human resources operations. The breach allowed unauthorized access to customer information stored in their systems.

If you have purchased products from Estée Lauder or its brands, your personal information may have been accessed. This could include your name, contact information, purchase history, and potentially payment details. The company has not specified exactly which customer data was stolen or how many people are affected.

If you have an online account with any Estée Lauder brand, you should assume your information may be at risk.

Take these steps immediately:

1. Watch for an official notification from Estée Lauder. Read it carefully to understand what specific information was taken.
2. If you used a credit or debit card for purchases, monitor your bank statements closely for any unauthorized charges. Report suspicious activity to your bank right away.
3. Change your password on any Estée Lauder brand websites where you have an account. Make sure the new password is unique and not used anywhere else.
4. Be alert for phishing emails. Scammers often follow data breaches by sending fake emails pretending to be from the company. Use this as a reminder to practice good security habits for all online shopping. Never reuse passwords across different websites. Consider using a password manager to create and store unique passwords for each site. Check your credit card statements regularly, not just after a breach. The sooner you spot fraud, the easier it is to resolve.