Este Lauder says it was hit by data breach caused by Oracle E-Business issue

Date:
Tue, 21 Jul 2026 14:15:00 +0000

Description:
The breach happened in August 2025, but was only spotted recently by Este Lauder.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Este Lauder confirms Oracle EBusiness Suite breach from August 2025, only disclosed in June 2026
Attackers stole extensive personal, financial, health, and employment data from HR management platform Breach tied to CVE202561882, a critical Oracle
EBS RCE flaw exploited across 100+ organizations If you remember the Oracle E-Business Suite vulnerability that was exploited around October 2025 in numerous attacks, you can now add Este Lauder to the list of victims.

The cosmetics giant has confirmed having been hit, despite the initial breach happening almost a year ago, following an investigation in mid-June 2026 uncovering the incident. In a data breach notification letter that is now being sent out, the company said that on June 19, 2026, we determined through our investigation that, on or around August 9, 2025, an unauthorized third party gained access to the Oracle E-Business Suite system and obtained personal information of certain individuals. Latest Videos From Watch full video here: Major remote code execution flaw Este Lauder said the platform
was used by the holding company for HR management purposes.

We dont know exactly how many people are affected by this incident, but we do know that the attackers obtained full names, postal addresses, email addresses, dates of birth, Social Security numbers (SSN), passport numbers, financial account information (including bank account numbers), health information, and employment information. You may like Oracle warns of
critical PeopleSoft attack affecting hundreds of customers Ernst & Young reveals data breach following hack on support system NAIC confirms data
breach with ShinyHunters claiming 3.1TB of data stolen in Oracle zero-day attack

This is more than enough data to run highly disruptive and damaging identity theft attacks, and Este Lauders warning is of little help coming almost a
year too late.

In early October 2025, cybercriminals started mailing executives at various American organizations, claiming to have stolen sensitive files from their Oracle E-Business Suite systems . At the time, both Oracle and the wider cybersecurity community were not certain if the breaches actually happened,
or if this was just a bluff to get the victims to pay a ransom demand. Are
you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro
newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

However, the claims were soon confirmed, since more than 100 organizations reported falling victim. In early October 2025, Oracle issued an emergency
fix to patch CVE-2025-61882, a 9.8/10 (critical) pre-authentication remote code execution (RCE) vulnerability in Oracle EBS.

"This vulnerability is remotely exploitable without authentication, i.e., it may be exploited over a network without the need for a username and
password," Oracle said in the advisory. "If successfully exploited, this vulnerability may result in remote code execution."

Via BleepingComputer The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/estee-lauder-says-it-was-hit-by-data-br each-caused-by-oracle-e-business-issue


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)