Luxury Cosmetics Giant Rituals Discloses Data Breach

Luxury cosmetics giant Rituals has disclosed a data breach, according to SecurityWeek. The company is currently notifying its “My Rituals” members that unauthorized actors successfully downloaded a portion of their personal data.

SecurityWeek reports that the compromised information includes customer names and physical addresses. While specific details regarding the attack vector or the number of affected individuals remain undisclosed, this incident underscores the persistent threat even to consumer-facing brands with substantial user bases.

For defenders, this is a clear signal: any organization handling customer Personally Identifiable Information (PII) is a target. The attacker’s calculus here is simple—extract easily monetizable data like names and addresses for phishing, identity theft, or resale on underground forums. This isn’t about sophisticated nation-state espionage; it’s about bulk data exfiltration for profit.