Estée Lauder Data Breach Exposes Health Information and SSNs

The Estée Lauder Companies Inc., one of the world's largest prestige beauty companies, disclosed a data breach. The total number of individuals affected by the breach across the United States has not been publicly reported.

At this time, information about the specific nature of the attack, the dates the breach took place or how the company first discovered the incident remain undisclosed publicly.

The types of information exposed in the breach included Social Security numbers, financial account codes, credit and debit account information, government ID numbers and health records.

The breach was reported to the Vermont Attorney General on July 10, 2026.

The Estée Lauder Companies' response to the breach

Given the sensitive nature of the data involved, individuals who believe they may have been impacted should pay close attention to any direct notifications they receive from the company in the coming weeks. These notifications would be expected to explain what happened, describe what information was involved and outline any resources the company is making available.

It is also important to verify that any communication claiming to be from the company is legitimate before taking action. Invidiuals who are unsure about a letter or email's authenticity can contact the company directly using the information listed on its official website, rather than relying on contact details from an unverified source.