Feed›Vulnerability›Estée Lauder discloses data breach tied to Oracle E-Business...
VulnerabilityCyber Insider
9.8 — CRITICAL

Estée Lauder discloses data breach tied to Oracle E-Business Suite attacks

📅 20 July 2026 at 10:34 UTC📰 Cyber InsiderView original source ↗
Estée Lauder discloses data breach tied to Oracle E-Business Suite attacks

The Estée Lauder Companies is notifying current and former employees that their personal information was stolen after attackers compromised the company's Oracle E-Business Suite (EBS) human resources environment in August 2025. The intrusion is linked to the wider Oracle EBS exploitation campaign that emerged last year and was later attributed to the Clop ransomware gang. … The post Estée Lauder discloses data breach tied to Oracle E-Business Suite attacks appeared first on CyberInsider.

🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview

Estée Lauder Companies disclosed a data breach linked to Oracle E-Business Suite attacks, with attackers exploiting CVE-2025-61882 vulnerability to steal sensitive personal and employment records. The attack is attributed to the Clop ransomware gang's mass-exploitation campaign targeting Oracle EBS.

⚙️Technical Details
CVEs
CVE-2025-61882Affected Systems: Oracle E-Business Suite (12.2.3-12.2.14)Attack Vectors: NETWORK
Affected Systems
Oracle E-Business Suite (12.2.3-12.2.14)
Attack Vectors
NETWORK
💥Impact Assessment
Severity: critical
Who Is at Risk
Current and former employees of Estée Lauder Companies
🛡️Recommended Actions
1Implement patching for Oracle E-Business Suite versions 12.2.3-12.2.14 as soon as possible.
2Monitor network traffic for signs of unauthorized access or exploitation.
3Enforce strong password policies and multi-factor authentication to prevent unauthorized access.
📦Affected Products
Oracle Concurrent Processing
🔐NVD Verified DataVERIFIED
CVE-2025-61882 ↗CVSS 9.8 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-287
Affected Products (CPE)
Oracle Concurrent Processing

Read the full article

This is a curated summary. The complete article is available at Cyber Insider.

Read on Cyber Insider ↗
← Back to feed