Luxury cosmetics giant Rituals has disclosed a data breach impacting the personal information of its My Rituals members.
The incident, the company says, occurred earlier this month and involved the unauthorized access to and download of some My Rituals members’ data.
“Immediately upon discovery, we took measures and stopped the unauthorized access. The situation has been contained, and affected members are being informed directly,” the company told SecurityWeek.
Rituals says the potentially impacted information may include customers’ names, addresses, phone numbers, email addresses, dates of birth, and gender.
No passwords or payment information were compromised during the intrusion, the company said in a notice on its website.
“We have initiated an in-depth forensic investigation to understand how this happened and what measures we can take to prevent a similar incident in the future. We have also reported it to the relevant authorities,” Rituals said.
A Rituals spokesperson told SecurityWeek that the company can not share the number of potentially impacted individuals at the moment. The company has over 40 million My Rituals members.
Citing security reasons, the representative did not share details about the attackers and would not confirm whether they attempted to extort the company.
SecurityWeek has not seen any known ransomware or extortion group claiming responsibility for the attack, and Rituals says it is not aware of the stolen information being made publicly available.
“We have contained the situation; there is no action required from you. We do advise you to stay alert for phishing messages,” Rituals told its customers.
Based in Amsterdam, Netherlands, Rituals sells luxury home and body cosmetics in over two dozen countries through an online store and over 1,170 shops and 4,200 shop-in-shops.
Related: Data Breaches at Healthcare Organizations in Illinois and Texas Affect 600,000
Related: Data Breach at Tennessee Hospital Affects 337,000
Related: Europe’s Largest Gym Chain Says Data Breach Impacts 1 Million Members
Related: Nightclub Giant RCI Hospitality Reports Data Breach
