The Estée Lauder Companies data breach
The Estée Lauder Companies appears in 9 breach notices filed with Texas AG, New Hampshire DOJ, California AG, Washington AG, Indiana AG, Vermont AG and Maryland AG, most recently reported on July 21, 2026.
Also listed as: The Estée Lauder Companies Inc.; The Estee Lauder Companies; Estée Lauder Companies Inc
Breach notices filed with regulators
| Reported | Filed with | Breach date(s) | People affected | Data involved | Source |
|---|---|---|---|---|---|
| Jul 21, 2026 | Texas AG | Aug 9, 2025 – Aug 12, 2025 | 1,959 Texas residents | Name of individualAddressSocial Security Number InformationGovernment-issued ID number (e.g. passport, state ID card)Financial Information (e.g. account number, credit or debit card number)Medical InformationOtherDate of Birth | Texas AG list ↗ |
| Jul 20, 2026 | New Hampshire DOJ | Not listed | Not listed | Not listed | Notice ↗ |
| Jul 17, 2026 | California AG | Aug 9, 2025, Aug 12, 2025 | Not listed | Not listed | California AG list ↗ |
| Jul 17, 2026 | Washington AG | Aug 9, 2025 – Aug 12, 2025 | 2,110 Washington residents | NameSocial Security NumberFinancial & Banking InformationFull Date of BirthPassport NumberMedical Information | Washington AG list ↗ |
| Jul 17, 2026 | Indiana AG | Aug 9, 2025 | 156 Indiana residents | Not listed | Indiana AG list ↗ |
| Jul 10, 2026 | Vermont AG | Not listed | 7 Vermont residents | Social Security NumbersFinancial Account CodesCredit and Debit Account InfoGovernment ID NumbersHealth Records | Vermont AG list ↗ |
| Oct 18, 2023 | Washington AG | May 30, 2023 – Jun 1, 2023 | 1,453 Washington residents | NameFull Date of Birth | Washington AG list ↗ |
| Aug 31, 2023 | Washington AG | Jul 11, 2023 – Aug 20, 2023 | 150,535 Washington residents | Email Address and Password/Security Question AnswersNameFull Date of BirthUsername and Password/Security Question Answers | Washington AG list ↗ |
| Aug 30, 2023 | Maryland AG | Not listed | 9 Maryland residents | NameSocial Security numberDate of birthMedical informationEmail addressAddressPhone number | Notice ↗ |
Each row is a notice as published by the agency. For state lists, the number affected counts only that state's residents; HHS lists the total reported. SEC rows are Form 8-K Item 1.05 filings, which usually don't give a count. A notice does not mean a settlement exists, and a settlement may cover a different incident than a given notice.
Is there a settlement?
We don't track an open class-action settlement for The Estée Lauder Companies right now. Settlements usually come months or years after a breach. Get an email when new settlements are announced.
What you can do now
- Read the notice letter if you got one. It says what data was involved and may offer free credit monitoring with an enrollment deadline.
- Consider a free credit freeze at Equifax, Experian and TransUnion, especially if your Social Security number was involved.
- Change reused passwords and turn on two-factor authentication.
- Watch your bank, card and insurance statements for activity you don't recognize.
Get new settlements and deadline reminders
One email a week: newly announced data-breach settlements and claim deadlines that are about to close. Free. Unsubscribe anytime.