In early July 2026, Estée Lauder experienced a data incident that was reported to the Vermont Attorney General's Office on July 10, 2026. The company has not yet released a comprehensive public statement.
The incident potentially involved highly sensitive information, including Social Security numbers, driver's license numbers, financial account numbers, credit/debit account information, government ID numbers, and health records. The total number of affected individuals has not been publicly disclosed. Individuals impacted are expected to receive a breach notification letter by mail.
Details surrounding the full scope of the breach and specific affected counts remain unclear. Additional information may emerge as investigations continue and official disclosures are made.