Estee Lauder Discloses Data Breach via Oracle E-Business Suite Flaw

Estée Lauder disclosed a breach where threat actors exploited a vulnerability in its Oracle E-Business Suite HR system, exposing employee and potentially customer personal data; the company is notifying affected parties, engaging forensic responders, patching EBS, and offering identity protection. The report emphasizes ERP platforms as high-value targets, typical causes (unpatched legacy EBS, internet exposure, customization), outlines likely exposed data categories, assesses impacts (identity theft, regulatory and reputational risk), and provides patching and ERP security best practices.