Estée Lauder Confirms Oracle EBS Data Theft

Estée Lauder confirms an Oracle EBS zero-day hack in August 2025 that led to the exfiltration of personal, financial, and health information. The attack targeted the company’s Oracle EBS instance, a software suite commonly used by large enterprises for supply chain, financial, and human resources management. The breach has raised significant concerns about data protection, as sensitive information is highly coveted by cyber criminals.

The cosmetics giant has been cooperating with authorities and cybersecurity experts to mitigate the impact of the breach. They have urged customers and stakeholders to remain vigilant and monitor their financial and medical accounts for any suspicious activity. Estée Lauder continues to enhance its cybersecurity measures to prevent future incidents.

This incident underscores the growing threat that zero-day vulnerabilities pose to businesses, necessitating continuous system evaluations and updates. Estée Lauder confirms Oracle EBS users should stay informed on security patches and protocols. For a deeper insight, read the full official news article.

https://www.securityweek.com/estee-lauder-discloses-impact-from-oracle-ebs-zero-day-hack/