Did The Estee Lauder Companies have a data breach?

Answer

Yes. The Estee Lauder Companies reported a data breach to the Indiana Attorney General on July 17, 2026.

What the filing says

Reported to: Indiana Attorney General
Filing date: July 17, 2026
Breach date: August 9, 2025
People affected: Not stated in the filing

Information involved

Full Name
Email Address
Password or Credential Hash
Mailing Address
Purchase and Order History
Payment Card Information
Phone Number
Loyalty Account Details

In plain terms

The Estee Lauder Companies reported a data security incident in Indiana on July 17, 2026, involving the potential exposure of various consumer data types. Individuals who receive a breach notification should review it carefully to understand the specific information affected and take recommended protective measures.

The Estee Lauder Companies, a global leader in prestige beauty products, filed a data breach report in Indiana on July 17, 2026. This incident, which occurred on August 9, 2025, involved an unspecified security event that may have compromised customer information. The company initiated an investigation and is currently monitoring the situation.

While the exact method of unauthorized access was not detailed, such incidents often involve vulnerabilities in digital platforms or third-party systems that manage consumer data. Companies that operate large e-commerce platforms and loyalty programs routinely collect and store a wide array of sensitive personal information.

The data categories reportedly exposed in this breach include Full Name, Email Address, Password or Credential Hash, Mailing Address, Purchase and Order History, Payment Card Information, Phone Number, and Loyalty Account Details. Exposure of these data types can lead to various risks, including targeted phishing attempts, fraudulent transactions, and unauthorized access to other online accounts if credential reuse is practiced.

Individuals who have received a notification regarding this breach should remain vigilant. It is recommended to monitor bank and credit card statements for any unusual activity. Consider changing passwords for online accounts, especially those shared with Estee Lauder. Be cautious of unsolicited emails or communications requesting personal information, as these could be phishing attempts. Utilize multi-factor authentication where available for enhanced security.

If you received a notification letter about this breach, you can compare it with other Indiana data breach filings or browse all cases.

Other filings by The Estee Lauder Companies

Companies often file the same breach in several states. Each filing is listed separately.

Commonly recommended next steps

Watch your financial accounts
Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.
Secure your online accounts
Change the password on any account that reused an exposed password and turn on two-factor authentication wherever it's offered.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Look up another company

Other breaches reported in Indiana

DataBreachSearch.com reports what was filed with state regulators. It is not legal advice, is not a law firm, and is not affiliated with any government agency or with The Estee Lauder Companies.