Estée Lauder discloses data breach via Oracle E-Business flaw

Estée Lauder suffered a data breach after attackers exploited a vulnerability in the Oracle E-Business Suite (CVE-2025-61882) used for HR operations. The breach, which occurred around August 9, 2025, allowed unauthorized access to sensitive personal and financial information of individuals. The Clop ransomware gang is linked to the attack, having exploited the flaw as a zero-day since early August 2025.

AI-extracted · verify before operational use