- Estée Lauder confirms Oracle E‑Business Suite breach from August 2025, only disclosed in June 2026
- Attackers stole extensive personal, financial, health, and employment data from HR management platform
- Breach tied to CVE‑2025‑61882, a critical Oracle EBS RCE flaw exploited across 100+ organizations
If you remember the Oracle E-Business Suite vulnerability that was exploited around October 2025 in numerous attacks, you can now add Estée Lauder to the list of victims.