Cosmetics giant Rituals confirms data breach of customer membership records

Rituals, a €2.4 billion cosmetics retailer with 41 million customers, disclosed a data breach of its membership database affecting customers across Europe, the UK, and the US, exposing names, dates of birth, addresses, phone numbers, and account preferences. This incident exemplifies the growing targeting of retail customer databases for extortion, requiring IT organizations to strengthen identity and access controls, audit third-party data handling practices, and implement robust breach detection capabilities. The breach underscores critical governance gaps, as Rituals declined to provide breach timeline details or affected customer counts, indicating potential deficiencies in incident response and stakeholder communication protocols.