Luxury cosmetics giant Rituals discloses data breach impacting member personal details

Rituals disclosed an unauthorized access incident in which attackers downloaded part of its My Rituals members' database, exposing personal details (full name, email, phone number, date of birth, gender, home address). The company reports no passwords or payment information were accessed, has stopped the download, initiated a forensic investigation, and notified authorities; the scope of impact and any public release of the data are currently unknown.