The Estee Lauder Companies Reports 2025 Data Breach to Regulators
The Estee Lauder Companies has publicly filed notice of a data incident that exposed personal information. While the specifics of the breach and the exact data types involved remain undisclosed in public records, affected individuals should remain vigilant about their accounts and communications. This filing ensures the incident is part of the public record for transparency.
- State
- Indiana
- Breach date
- August 9, 2025
- Reported
- July 17, 2026
What may have been exposed
- Full Name
- Email Address
- Password or Credential Hash
- Mailing Address
- Purchase and Order History
- Payment Card Information
- Phone Number
- Loyalty Account Details
The Estee Lauder Companies, a global leader in prestige beauty products, recently reported a data breach involving personal information. The breach became a matter of public record following a filing made on July 17, 2026, as required by regulations in Indiana and potentially other jurisdictions.
The nature of the incident that led to this exposure, as well as the precise categories of personal information affected, were not specified in the available public filing. This means individuals cannot immediately determine the exact type of their data that might have been compromised.
The breach itself reportedly occurred on August 9, 2025, with the company initiating a monitoring phase for the incident. The delay between the breach date and the public filing is typical as companies investigate, secure their systems, and identify affected parties.
Individuals who receive direct notification from The Estee Lauder Companies regarding this incident should carefully review the information provided. It is always wise to be cautious of any unsolicited communications, whether by email, phone, or mail, that claim to be from the company or related to the breach.
As a general precaution, it is recommended to monitor financial accounts for any unusual activity and review credit reports regularly. Accessing free annual credit reports from the major bureaus can help detect any fraudulent accounts or inquiries. While specific data types are not known, these steps offer broad protection for various forms of personal information.
This information is based on public disclosures made to regulatory bodies. The Estee Lauder Companies is expected to provide more detailed guidance to those individuals directly impacted by the data exposure.
What to do if you were affected
Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.
Watch your financial accounts
Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.
Secure your online accounts
Change the password on any account that reused an exposed password and turn on two-factor authentication wherever it's offered.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Source: Indiana Attorney General filing
Related data breach cases
- Teamsters Local 17
- Bank
- American Motorcyclist Association
- Deer Management Co. LLC dba Bessemer Venture Partners
- MEBS Global Reach
- McKenzie Creative Brands
- Midvale Indemnity and American Family Connect Insurance Company
- Nishiyamato Academy
- 9World Acceptance Corporation
- Chicago Psychoanalytic Institute
- Poppins Payroll Company
- Baltimore Medical System Inc
- Pavillon International Inc
- 7The Association of the Bar of the City of New York