Estée Lauder data breach linked to Oracle EBS vulnerability
A data breach linked to an Oracle E-Business Suite vulnerability occurred at Estée Lauder. The company disclosed the impact of the breach, and the scale of the leak has not been confirmed.
Key facts
- Affected organisation
- Estée Lauder
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Not confirmed
- Cause / method
- Exploitation of an Oracle E-Business Suite vulnerability
- Location
- United States
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- The possibility of litigation over the data breach was raised.
- Estée Lauder disclosed a data breach through an Oracle E-Business Suite vulnerability.
- CVE-2025-61882 was identified as the vulnerability exploited in the breach.
- It emerged that the data breach had occurred about 10 months before it was disclosed.
7 related reports
- The Estée Lauder Companies Data Breach Reported, Lawsuit Possible
- Estée Lauder discloses data breach via Oracle E-Business flaw
- Estée Lauder discloses data breach tied to Oracle EBS vulnerability
- Estée Lauder Discloses Impact From Oracle EBS Zero-Day Hack
- Estée Lauder Data Breach Analysis: Oracle E-Business Suite CVE-2025-61882 Exploitation by Clop Ransomware
- Cosmetics Giant Estée Lauder Discloses a 10-Month Old Data Breach
- Estée Lauder Confirms Data Breach After Oracle Hack
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.