Estée Lauder Reports Data Security Incident to Texas AG

The Estée Lauder Companies, a prominent global retailer in the prestige beauty industry, formally reported a data security incident to the Texas Attorney General. This disclosure, made on July 21, 2026, confirms that certain systems experienced unauthorized access.

The nature of the breach involved unauthorized access to the company's databases. While the specific categories of information impacted were not detailed in the public filing, individuals who received a formal notification letter from Estée Lauder should understand that their personal information was likely stored within the affected systems.

The breach itself reportedly occurred on August 9, 2025. Following the detection of this security event, The Estée Lauder Companies initiated an investigation, which is still active and ongoing.

If you have received a direct data breach notification letter from The Estée Lauder Companies, it signifies that your data was involved in this incident. Such letters typically outline the specific categories of your information that may have been compromised and detail any protective measures the company is offering.

In light of this incident, it is generally recommended to remain vigilant for any unusual activity across your accounts. Regularly review financial statements and credit reports for discrepancies. While the specific data types involved remain broad, exercising caution with unsolicited communications and verifying sender identities before clicking links or sharing personal details is a wise general practice.