--- title: Estée Lauder discloses data breach via Oracle E-Business... description: Estée Lauder is notifying customers of a data breach stemming from exploitation of CVE-2025-61882, a zero-day vulnerability in Oracle E-Business Suite used for... canonical: https://daily.dev/posts/est-e-lauder-discloses-data-breach-via-oracle-e-business-flaw-3qapxj2ul twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Estée Lauder discloses data breach via Oracle E-Business flaw | daily.dev og:description: Estée Lauder is notifying customers of a data breach stemming from exploitation of CVE-2025-61882, a zero-day vulnerability in Oracle E-Business Suite used for... og:url: https://daily.dev/posts/est-e-lauder-discloses-data-breach-via-oracle-e-business-flaw-3qapxj2ul og:image: https://api.daily.dev/og/posts/3QApXJ2uL.png og:image:alt: Estée Lauder discloses data breach via Oracle E-Business flaw og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Estée Lauder discloses data breach via Oracle E-Business flaw **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 3 min read · 0 upvotes · 1 comments ## Summary Estée Lauder is notifying customers of a data breach stemming from exploitation of CVE-2025-61882, a zero-day vulnerability in Oracle E-Business Suite used for HR management. The breach occurred on August 9, 2025, but was only confirmed in June 2026. Exposed data includes full names, SSNs, passport numbers, bank account numbers, health information, and employment records. The attack is attributed to the Clop ransomware gang, which exploited the flaw as a zero-day before Oracle released patches in October 2025. Other victims of the same campaign include Harvard, University of Pennsylvania, Dartmouth, Logitech, and The Washington Post. Estée Lauder is offering 24 months of identity monitoring through Kroll. This is the second time Clop has breached Estée Lauder, having previously exploited the MOVEit Transfer zero-day in 2023. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Community discussion Top comments from developers on daily.dev. **@trevorsuna** · 0 upvotes > A zero-day is hard to stop, but taking almost a year to confirm the breach makes the damage worse. For HR systems holding this much sensitive data, detection and data minimization have to matter as much as patching. --- Tags: [#vulnerability](https://daily.dev/tags/vulnerability), [#data-breach](https://daily.dev/tags/data-breach) [View this post on daily.dev](https://daily.dev/posts/est-e-lauder-discloses-data-breach-via-oracle-e-business-flaw-3qapxj2ul) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Estée Lauder discloses data breach via Oracle E-Business flaw","url":"https://daily.dev/posts/est-e-lauder-discloses-data-breach-via-oracle-e-business-flaw-3qapxj2ul","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/est-e-lauder-discloses-data-breach-via-oracle-e-business-flaw-3qapxj2ul"},"datePublished":"2026-07-20T22:44:14.054Z","dateModified":"2026-07-22T12:41:10.764Z","description":"Estée Lauder is notifying customers of a data breach stemming from exploitation of CVE-2025-61882, a zero-day vulnerability in Oracle E-Business Suite used for...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/a83d3d59f67c3d6533d27ce1a14fa76a?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/a83d3d59f67c3d6533d27ce1a14fa76a?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":1,"discussionUrl":"https://daily.dev/posts/est-e-lauder-discloses-data-breach-via-oracle-e-business-flaw-3qapxj2ul","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":1}],"keywords":"vulnerability,data-breach","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"Estée Lauder discloses data breach via Oracle E-Business flaw"}]} {"@context":"https://schema.org","@type":"WebPage","@id":"https://daily.dev/posts/est-e-lauder-discloses-data-breach-via-oracle-e-business-flaw-3qapxj2ul","comment":[{"@type":"Comment","text":"A zero-day is hard to stop, but taking almost a year to confirm the breach makes the damage worse. For HR systems holding this much sensitive data, detection and data minimization have to matter as much as patching.","datePublished":"2026-07-21T02:15:12.379Z","url":"https://daily.dev/posts/3QApXJ2uL#c-bpKFNkLht","author":{"@type":"Person","name":"Trevor Suna","url":"https://daily.dev/trevorsuna","image":"https://media.daily.dev/image/upload/s--dZ7gXxpp--/f_auto/v1784081551/avatars/avatar_EMoP47rpuw8DNjhp6R1b6?_a=BAMAMicg0"}}]} ```