Security News > 2023 > July > Estée Lauder beauty giant breached in two separate ransomware attacks
Two ransomware actors, ALPHV/BlackCat and Clop, have listed beauty company Estée Lauder on their data leak sites as a victim of separate attacks.
In a Security Exchange Commission filing on Tuesday, The Estée Lauder Companies confirmed one of the attacks saying that the threat actor gained access to some of its systems and may have stolen data.
The threat actor started leveraging the vulnerability when it was a zero-day in late May and claimed to have breached hundreds of companies for data theft extortion.
On their data leak site, Clop ransomware lists Estée Lauder with the simple message "The company doesn't care about its customers, it ignored their security!!!" and a note that they have more than 131GB of the company's data.
On Tuesday, BlackCat also added Estée Lauder to their list of victims but the entry is accompanied by a message showing the threat actor's dissatisfaction towards the company's silence to their extortion emails.
Referring to the security experts that Estée Lauder brought in to investigate, BlackCat said that despite the company using Microsoft's Detection and Response Team and Mandiant the network remained compromised and they still had access.
News URL
Related news
- Ascension: Health data of 5.6 million stolen in ransomware attack (source)
- Clop ransomware threatens 66 Cleo attack victims with data leak (source)
- French govt contractor Atos denies Space Bears ransomware attack claims (source)
- Casio says data of 8,500 people exposed in October ransomware attack (source)
- Preventing the next ransomware attack with help from AI (source)
- Ransomware on ESXi: The mechanization of virtualized attacks (source)
- OneBlood confirms personal data stolen in July ransomware attack (source)
- Enzo Biochem settles lawsuit over 2023 ransomware attack for $7.5M (source)
- Medusa ransomware group claims attack on UK's Gateshead Council (source)
- Ransomware attack forces Brit high school to shut doors (source)