{"id":740320,"date":"2026-07-22T15:55:17","date_gmt":"2026-07-22T12:55:17","guid":{"rendered":"https:\/\/buradabiliyorum.com\/en\/estee-lauder-hit-by-oracle-e-business-data-breach\/"},"modified":"2026-07-22T15:55:17","modified_gmt":"2026-07-22T12:55:17","slug":"estee-lauder-hit-by-oracle-e-business-data-breach","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/estee-lauder-hit-by-oracle-e-business-data-breach\/","title":{"rendered":"Est\u00e9e Lauder hit by Oracle E-Business data breach"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_89 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6af66d5eb1319\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #dd3333;color:#dd3333\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #dd3333;color:#dd3333\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6af66d5eb1319\" checked aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/buradabiliyorum.com\/en\/estee-lauder-hit-by-oracle-e-business-data-breach\/#Nearly_a_year_in_the_dark\" >Nearly a year in the dark<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/buradabiliyorum.com\/en\/estee-lauder-hit-by-oracle-e-business-data-breach\/#One_flaw_a_hundred_victims\" >One flaw, a hundred victims<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/buradabiliyorum.com\/en\/estee-lauder-hit-by-oracle-e-business-data-breach\/#A_familiar_pattern\" >A familiar pattern<\/a><\/li><\/ul><\/nav><\/div>\n<div id=\"article-main-content\">\n<p>The cosmetics giant Est\u00e9e Lauder is notifying staff of a data breach after hackers slipped into the Oracle software it uses to run human resources. <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/est-e-lauder-discloses-data-breach-via-oracle-e-business-flaw\/\" target=\"_blank\" rel=\"nofollow noopener\">BleepingComputer<\/a> first reported the disclosure.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Nearly_a_year_in_the_dark\"><\/span>Nearly a year in the dark<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The timeline is the uncomfortable part. According to the company\u2019s <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.documentcloud.org\/documents\/28500975-elc-us-individual-notification-letter\/\" target=\"_blank\" rel=\"nofollow noopener\">notification letter<\/a>, an intruder reached its Oracle E-Business Suite system on or around 9 August 2025. Est\u00e9e Lauder says it only confirmed the theft on 19 June 2026. The letters went out on 17 July. That is close to a year of exposure.<\/p>\n<p>The haul is broad. The stolen records include full names, postal and email addresses, dates of birth, <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/social-mediaa\/\" data-internallinksmanager029f6b8e52c=\"1\" title=\"Social Media\" target=\"_blank\" rel=\"noopener\">social<\/a>-security numbers, passport numbers, bank account details, health information, and employment data such as payroll and performance reviews. The company is offering affected staff two years of free identity monitoring through Kroll.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"One_flaw_a_hundred_victims\"><\/span>One flaw, a hundred victims<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Est\u00e9e Lauder does not name the bug in its letter. The dates, though, line up with a mass-exploitation campaign against Oracle E-Business Suite through a flaw known as CVE-2025-61882.<\/p>\n<div class=\"inarticle-wrapper latest channel-cta hs-embed-tnw\">\n<div id=\"hs-embed-tnw\" class=\"channel-cta-wrapper\">\n<div class=\"channel-cta-img\"><img decoding=\"async\" class=\"js-lazy\" src=\"https:\/\/media.thenextweb.com\/hardfork-2018\/uploads\/visuals\/tnw-newsletter.png\"\/><\/div>\n<p><img decoding=\"async\" src=\"https:\/\/media.thenextweb.com\/hardfork-2018\/uploads\/visuals\/tnw-newsletter.png\"\/><\/p>\n<div class=\"channel-cta-input\">\n<p class=\"channel-cta-title\">The \ud83d\udc9c of EU tech<\/p>\n<p class=\"channel-cta-tagline\">The latest rumblings from the EU tech scene, a story from our wise ol&#8217; founder Boris, and some questionable AI art. It&#8217;s free, every week, in your inbox. Sign up now!<\/p>\n<\/div>\n<\/div>\n<\/div>\n<p>That flaw is serious. It is a critical, pre-authentication vulnerability that lets an attacker run code on the system with no username or password. Oracle patched it on 4 October 2025. By then the Clop ransomware gang had already been exploiting it as a zero-day since early August, according to security researchers.<\/p>\n<p>Est\u00e9e Lauder is far from alone. More than 100 organisations were caught in the same wave. Named victims include Harvard, the University of Pennsylvania, The Washington Post, Logitech, and Cox Enterprises.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"A_familiar_pattern\"><\/span>A familiar pattern<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The case shows a soft spot the industry keeps hitting: trusted third-party business software. Attackers do not need to break down the front door if they can walk through a vendor\u2019s. One unpatched flaw in a shared platform turns into dozens of data breaches at once.<\/p>\n<p>Est\u00e9e Lauder has been here before.<\/p>\n<p>Clop also hit the company in 2023, that time through a zero-day in the MOVEit file-transfer tool. The bigger worry is the gap. A breach in August that surfaces the following summer gives criminals a long, quiet head start, and gives victims almost no warning before their data is already in play.<\/p>\n<p>As <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.techradar.com\/pro\/security\/estee-lauder-says-it-was-hit-by-data-breach-caused-by-oracle-e-business-issue\" target=\"_blank\" rel=\"nofollow noopener\">TechRadar<\/a> noted, a warning this late is of limited help. It is also a preview of how these extortion campaigns will keep playing out.<\/p>\n<\/p><\/div>\n<blockquote><p><strong><span style=\"color: #ff6600;\">If you liked the article, do not forget to share it with your friends. Follow us on\u00a0<span style=\"color: #ff0000;\"><a style=\"color: #ff0000;\" href=\"https:\/\/news.google.com\/publications\/CAAqBwgKMN63nwsw68G3Aw\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Google News<\/a><\/span>\u00a0too, click on the star and choose us from your favorites.<\/span><\/strong><\/p><\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\"><strong>If you want to read more like this article, you can visit our <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/buradabiliyorum.com\/en\/category\/technology\/\" target=\"_blank\" >Technology category.<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n<p><span style=\"color: black;\"><a style=\"color: #ff9900;\" href=\"https:\/\/thenextweb.com\/news\/estee-lauder-oracle-e-business-data-breach\" target=\"_blank\" >Source<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The cosmetics giant Est\u00e9e Lauder is notifying staff of a data breach after hackers slipped into the Oracle software it uses to run human resources. BleepingComputer first reported the disclosure. Nearly a year in the dark The timeline is the uncomfortable part. According to the company\u2019s notification letter, an intruder reached its Oracle E-Business Suite&#8230;<\/p>\n","protected":false},"author":1,"featured_media":740321,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/media.thenextweb.com\/2026\/07\/Este\u0301e-Lauder-Companies-Inc.avif","fifu_image_alt":"","footnotes":""},"categories":[18],"tags":[],"class_list":["post-740320","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology"],"_links":{"self":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/740320","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/comments?post=740320"}],"version-history":[{"count":0,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/740320\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media\/740321"}],"wp:attachment":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media?parent=740320"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/categories?post=740320"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/tags?post=740320"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}