Estee Lauder Companies Reports 2026 Data Breach Affecting Customer Information

The Estee Lauder Companies, a prominent beauty product manufacturer, filed notice of a data security incident with Indiana regulators on July 17, 2026. The company indicated that the breach originated on August 9, 2025, and potentially compromised various customer records maintained by the company.

According to official disclosures, the exposed information includes individuals' Full Name, Email Address, Password or Credential Hash, Mailing Address, Purchase and Order History, Payment Card Information, Phone Number, and Loyalty Account Details. Such data, when accessed by unauthorized parties, can lead to a range of risks for the affected individuals.

Exposure of contact information like full names, email addresses, and phone numbers can facilitate targeted phishing attempts, spam campaigns, and other forms of social engineering. Compromised password hashes may allow unauthorized access to online accounts if not adequately protected. Additionally, the exposure of mailing addresses, purchase history, payment card information, and loyalty account details can increase the risk of identity fraud and unauthorized financial transactions.

Individuals who receive notification about this incident are encouraged to take proactive steps to protect their information. It is advisable to change passwords for any online accounts linked to The Estee Lauder Companies, especially if similar passwords are used elsewhere. Enabling multi-factor authentication (MFA) on all online services where available can add an extra layer of security. Monitoring credit reports and financial statements for any suspicious activity is also a prudent measure. Be cautious of unexpected emails, calls, or text messages that request personal information or account details.