Estee Lauder identifies cybersecurity incident, sees business ‘disruption’

The Estee Lauder Companies has identified a cybersecurity incident, which involves an unauthorized third party that has gained access to some of the company’s systems. After becoming aware of the incident, the company proactively took down some of its systems and promptly began an investigation with the assistance of leading third-party cybersecurity experts. The company is also coordinating with law enforcement. Based on the current status of the investigation, the company believes the unauthorized party obtained some data from its systems, and the company is working to understand the nature and scope of that data. The company is implementing measures to secure its business operations and will continue taking additional steps as appropriate. During this ongoing incident, the company is focused on remediation, including efforts to restore impacted systems and services. The incident has caused, and is expected to continue to cause, disruption to parts of the company’s business operations.