The Estée Lauder Companies Data Breach (2026): What Was Exposed & Free Credit Monitoring

✅ Official notice on file. The Estée Lauder Companies filed this data breach notice with the California Attorney General on Jul 17, 2026. Compare it with the letter you received: the official copy is linked below.

View the official notice · Read the letter (PDF)

The Estée Lauder Companies reported a data breach. The information involved includes Social Security number, passport number, financial account / bank info, email address, employment / payroll info.

Key facts

Discovered Jun 19, 2026
Data exposed Social Security number, Passport number, Financial account / bank info, Email address, Employment / payroll info
Letter sent Jul 17, 2026
Reported to California AG Jul 17, 2026
Company helpline 1-888-743-0023

Free credit monitoring

The Estée Lauder Companies is offering 24 months of Kroll at no cost to people who received the letter. Enroll at enroll.krollmonitoring.com using the activation code printed on your letter.

What to do now

  1. Freeze your credit for free at Equifax, Experian and TransUnion, and request an IRS Identity Protection PIN at irs.gov to block fraudulent tax returns in your name.
  2. Consider reporting the exposure to the U.S. State Department if you see suspicious activity; a new passport invalidates the old number.
  3. Call your bank, ask about extra monitoring or a new account number, and review statements for small unknown charges.
  4. Expect targeted phishing that mentions this incident: do not click links in unexpected emails about the breach.
  5. Check your pay stubs and W-2 for changes to direct deposit or withholding you did not make.
  6. Get your free credit reports at AnnualCreditReport.com and look for accounts you do not recognize.
  7. Call the The Estée Lauder Companies helpline at 1-888-743-0023 if you have questions about your letter.

Timeline

  • Jun 19, 2026 — The Estée Lauder Companies discovers the incident
  • Jul 17, 2026 — Notification letters sent
  • Jul 17, 2026 — Breach reported to the California Attorney General

Other recent data breaches

Source: notification letter and filing submitted by The Estée Lauder Companies to the California Attorney General. BreachLetter is not affiliated with The Estée Lauder Companies. Details extracted from the official letter; always follow the instructions in your own copy.