Estée Lauder confirms data exfiltration via Oracle EBS zero-day exploit

Estée Lauder disclosed that threat actors exploited a zero-day vulnerability in its Oracle E-Business Suite (EBS) in August 2025 to exfiltrate sensitive personal, financial, and health data. The extent of the compromised user base remains unquantified, highlighting ongoing risks to enterprise resource planning systems.