On July 18, 2023, the Estée Lauder Companies Inc. (“Estée Lauder”) filed documents with the Securities and Exchange Commission after discovering that an unauthorized third party gained access to its computer systems. In this notice, Estée Lauder explains that, while the investigation is ongoing, it believes that the unauthorized party was able to access certain data stored on its computer network. Once Estée Lauder completes its investigation, it will begin sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you receive a data breach notification from Estée Lauder, it is essential you understand what is at risk and what you can do about it. As we’ve reported in previous posts, companies have a legal duty to protect the information of their employees as well as their customers. And while companies are not responsible for initiating a cyberattack, their duty to protect information requires they take certain preventative measures against cyber threats. Should Estee Lauder confirm that data was leaked, a data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft as well as discuss your legal options following an Estée Lauder data breach.

What Caused the Potential Data Breach at Estée Lauder?

The cybersecurity incident at Estée Lauder was only recently announced, and more information is expected in the near future. In the meantime, Estée Lauder’s filing with the Securities and Exchange Commission provides some information about what the company knows so far. According to this source, Estée Lauder recently identified a cybersecurity incident after an unauthorized party was able to gain access to a portion of the company’s computer network.

In response, Estée Lauder took down its systems, reported the incident to law enforcement, and launched an investigation with the help of third-party data security specialists. While the Estée Lauder investigation is ongoing, the company notes that, “based on the current status of the investigation, Estée Lauder believes the unauthorized party obtained some data from its systems.”

If and when Estée Lauder confirms that employee or consumer data were leaked, the company will send out data breach letters to anyone who was affected by the recent data security incident. These letters should inform individual victims of what information of theirs was compromised.

More Information About the Estée Lauder Companies Inc.

Founded in 1946 and based in New York City, New York, the Estée Lauder Companies Inc. is a manufacturer and marketer of skincare, makeup, fragrance and hair care products. As the second-largest cosmetics company in the world, Estée Lauder owns over 20 brands, including La Mer, MAC Cosmetics, Jo Malone London, Clinique, Aramis, Aveda and Tom Ford Beauty. Estée Lauder employs more than 60,000 people and generates approximately $16 billion in annual revenue.