Luxury Cosmetics Giant Rituals Discloses Data Breach

Luxury cosmetics giant Rituals has disclosed a data breach impacting the personal information of its My Rituals members. The incident, the company says, occurred earlier this month and involved the unauthorized access to and download of some My Rituals members’ data. “Immediately upon discovery, we took measures and stopped the unauthorized access. The situation has been contained, and affected members are being informed directly,” the company told SecurityWeek. Rituals says the potentially impacted information may include customers’ names, addresses, phone numbers, email addresses, dates of birth, and gender. No passwords or payment information were compromised during the intrusion, the company said in a notice on its website. “We have initiated an in-depth forensic investigation to understand how this happened and what measures we can take to prevent a similar incident in the future. We have also reported it to the relevant authorities,” Rituals said. A Rituals spokesperson told SecurityWeek that the company can not share the number of potentially impacted individuals at the moment. The company has over 40 million My Rituals members. Citing security reasons, the representative did not share details about the attackers and would not confirm whether they attempted to extort the company. SecurityWeek has not seen any known ransomware or extortion group claiming responsibility for the attack, and Rituals says it is not aware of the stolen information being made publicly available. “We have contained the situation; there is no action required from you. We do advise you to stay alert for phishing messages,” Rituals told its customers. Based in Amsterdam, Netherlands, Rituals sells luxury home and body cosmetics in over two dozen countries through an online store and over 1,170 shops and 4,200 shop-in-shops. Related: Data Breaches at Healthcare Organizations in Illinois and Texas Affect 600,000 Related: Data Breach at Tennessee Hospital Affects 337,000 Related: Europe’s Largest Gym Chain Says Data Breach Impacts 1 Million Members Related: Nightclub Giant RCI Hospitality Reports Data Breach WRITTEN BY Ionut Arghire Ionut Arghire is an international correspondent for SecurityWeek. More from Ionut Arghire Mirai Botnet Targets Flaw in Discontinued D-Link Routers North Korean Hackers Use AppleScript, ClickFix in Fresh macOS Attacks Oracle Patches 450 Vulnerabilities With April 2026 CPU Dozens of Malicious Crypto Apps Land in Apple App Store Progress Patches Multiple Vulnerabilities in MOVEit WAF, LoadMaster Organizations Warned of Exploited Cisco, Kentico, Zimbra Vulnerabilities $290 Million Kelp DAO Crypto Heist Blamed on North Korea British Scattered Spider Hacker Pleads Guilty in the US Latest News Rilian Raises $17.5 Million for AI-Native Security Orchestration The Behavioral Shift: Why Trusted Relationships Are the Newest Attack Surface AI Can Autonomously Hack Cloud Systems With Minimal Oversight: Researchers  Apple Patches iOS Flaw Allowing Recovery of Deleted Chats Recent Microsoft Defender Vulnerability Exploited as Zero-Day After Bluesky, Mastodon Targeted in DDoS Attack Most Serious Cyberattacks Against the UK Now From Russia, Iran and China, Cyber Chief Says New Wiper Malware Targeted Venezuelan Energy Sector Prior to US Intervention  Trending Webinar: A Step-By-Step Approach To AI Governance April 28, 2026 With "Shadow AI" usage becoming prevalent in organizations, learn how to balance the need for rapid experimentation with the rigorous controls required for enterprise-grade deployment. Register Virtual Event: Threat Detection And Incident Response Summit May 20, 2026 Delve into big-picture strategies to reduce attack surfaces, improve patch management, conduct post-incident forensics, and tools and tricks needed in a modern organization. Register People on the Move Anti-ransomware platform Halcyon has named Kirstjen Nielsen and Chris Inglis as Strategic Advisors. ThreatModeler has appointed Kevin Gallagher as Chief Executive Officer. Thomas Bain has been appointed Chief Marketing Officer at Silent Push. More People On The Move Expert Insights Government Can’t Win The Cyber War Without The Private Sector Securing national resilience now depends on faster, deeper partnerships with the private sector. (Steve Durbin) The Hidden ROI Of Visibility: Better Decisions, Better Behavior, Better Security Beyond monitoring and compliance, visibility acts as a powerful deterrent, shaping user behavior, improving collaboration, and enabling more accurate, data-driven security decisions. (Joshua Goldfarb) The New Rules Of Engagement: Matching Agentic Attack Speed The cybersecurity response to AI-enabled nation-state threats cannot be incremental. It must be architectural. (Nadir Izrael) The Next Cybersecurity Crisis Isn’t Breaches—It’s Data You Can’t Trust Data integrity shouldn’t be seen only through the prism of a technical concern but also as a leadership issue. (Steve Durbin) Why Agentic AI Systems Need Better Governance – Lessons From OpenClaw Agentic AI platforms are shifting from passive recommendation tools to autonomous action-takers with real system access, (Etay Maor) Flipboard Reddit Whatsapp Email