Estée Lauder has confirmed being impacted by the 2025 Oracle EBS zero-day campaign that affected dozens of companies.
Employee data at US-based cosmetics firm Estée Lauder was compromised through a vulnerability in Oracle's software, likely orchestrated by the Cl0p ransomware gang.