
- Rituals confirmed a cyberattack in April that exposed customer data from its “My Rituals” membership program.
- Stolen information includes names, contact details, birth dates, and addresses, though passwords and payment data were not accessed.
- The company launched a forensic investigation, notified affected users, and reported the incident to authorities, with no evidence of public leaks so far.
Global cosmetics powerhouse Rituals suffered a cyberattack in which it lost personally identifiable data (PII) belonging to its customers.