2023-07-19 ESTEE LAUDER COMPANIES INC Cybersecurity Incident

Page last updated on September 29, 2025

ESTEE LAUDER COMPANIES INC initially disclosed a cybersecurity incident in an SEC 8-K filing on 2023-07-19 06:01:07 EDT.

Incident Details

Material: No
Is Breach: Yes
Records Compromised: Unknown
Data Types Impacted: No Data Types Tracked (yet)

Compromised Date: Unknown
Detected Date: Unknown
Disclosure Date: 2023-07-18
Contained Date: Unknown
Recovered Date: Unknown

Attack Goal: Unknown
Attack Tactics¹: TA0001, TA0010
Attack Techniques¹: No Attack Techniques Tracked (yet)

Costs: No Costs Tracked (yet)

Filings

8-K filed on 2023-07-19

ESTEE LAUDER COMPANIES INC filed an 8-K at 2023-07-19 06:01:07 EDT
Accession Number: 0001140361-23-035105

Item 8.01 Other Events.

On July 18, 2023, The Estée Lauder Companies Inc. issued a press release regarding a cybersecurity incident involving the Company. A copy of the press release is attached hereto as Exhibit 99.1

Exhibit No. 99.1

Press Release issued by the Company, dated July 18, 2023

The Estée Lauder Companies Inc. Provides Information on Cybersecurity Incident

NEW YORK (BUSINESS WIRE) - July 18, 2023 - The Estée Lauder Companies Inc. (NYSE: EL) has identified a cybersecurity incident, which involves an unauthorized third party that has gained access to some of the Company’s systems. After becoming aware of the incident, the Company proactively took down some of its systems and promptly began an investigation with the assistance of leading third-party cybersecurity experts. The Company is also coordinating with law enforcement. Based on the current status of the investigation, the Company believes the unauthorized party obtained some data from its systems, and the Company is working to understand the nature and scope of that data.

The Company is implementing measures to secure its business operations and will continue taking additional steps as appropriate. During this ongoing incident, the Company is focused on remediation, including efforts to restore impacted systems and services. The incident has caused, and is expected to continue to cause, disruption to parts of the Company’s business operations.

During this period, we thank our employees for their resiliency. Together, we remain focused on our business, consumers and other stakeholders.

Company Information