Cosmetics giant Rituals discloses data breach affecting customers

Rituals disclosed that attackers downloaded personal information from its "My Rituals" loyalty database; affected fields may include full name, email, phone number, date of birth, gender, and home address, while no passwords or payment information were accessed. The company has blocked attacker access, notified relevant authorities, initiated a forensic investigation, and informed affected customers, but has not disclosed the number of impacted members (its program has over 41 million members) and no threat actor or public leak has been confirmed.