In a significant cybersecurity incident, cosmetics leader Estée Lauder has alerted employees about a data breach that compromised personal information. The breach originated from a zero-day vulnerability in their Oracle E-Business Suite (EBS), exploited by the notorious Cl0p cybercrime group.
Understanding the Breach
The breach occurred in early August 2025, when Cl0p started leveraging a critical vulnerability identified as CVE-2025-61882. This flaw allowed unauthorized remote code execution, leading to data exfiltration from several organizations, including Estée Lauder. By November, over 100 companies were featured on the Cl0p leak site, confirming the widespread impact of this cyberattack.
Impact on Major Corporations
By March 2026, major corporations such as Broadcom, Bechtel, Estée Lauder, and Abbott Laboratories had yet to reveal the repercussions of the attack on their operations. Cl0p claimed to have obtained 870GB of archive files from Estée Lauder, heightening concerns about the extent of the breach.
Following the release of a patch in early October, cybersecurity firm CrowdStrike reported evidence that the exploitation of the vulnerability began on August 9, coinciding with the attack on Estée Lauder.
Company’s Response and Future Measures
In June, Estée Lauder’s internal investigation confirmed the theft of personal information, including names, addresses, birth dates, Social Security numbers, and employment-related data. The company is offering two years of free identity monitoring services to those potentially affected and advises vigilance against suspicious communications.
Estée Lauder has notified law enforcement and is enhancing its cybersecurity measures to prevent future incidents. Although the exact number of affected individuals remains undisclosed, efforts are underway to address the breach’s impact comprehensively.
As investigations continue, Estée Lauder’s response illustrates the growing necessity for robust cybersecurity practices to safeguard sensitive data in an increasingly digital world.
