Estée Lauder reports an unauthorized third party accessed some systems and obtained data

The Estée Lauder Companies disclosed on July 19, 2023 that an unauthorized third party had gained access to some of its systems and obtained data. The company proactively took down some systems, and it said the incident had disrupted, and would keep disrupting, parts of its business.

What the company said

The 8-K attached a July 18 press release. On data, the release was preliminary.

The release said the company was coordinating with law enforcement and working with outside cybersecurity experts, and that remediation, including restoring systems and services, was under way.

What the filing omits

The disclosure gives no detection date, does not describe the type of data or the type of attack, and makes no statement about financial materiality. This log holds no follow-up 8-K for the incident.