Rituals Cosmetics Suffers Data Breach, Customer PII Exposed

Rituals Cosmetics, the Dutch beauty and home brand, has reported a data breach impacting its ‘My Rituals’ customer club. According to Cyber News - Erez Dasa, attackers successfully exfiltrated personal information from the loyalty program’s database.

The compromised data includes full names, email addresses, phone numbers, and dates of birth. While Rituals has not disclosed the vector, such breaches often stem from weak access controls, misconfigurations, or successful phishing campaigns targeting internal systems. The scope of affected customers remains unclear, but any loyalty program database is a high-value target for threat actors.

This incident underscores the persistent risk associated with collecting and storing extensive customer PII. For attackers, this data is a goldmine for subsequent phishing, social engineering, and identity theft campaigns. It’s not just about the immediate breach; it’s about the downstream impact on individuals who now face increased exposure.