Cosmetics big Rituals confirms knowledge breach of buyer membership data

Netherlands-based cosmetics big Rituals has confirmed an information breach affecting prospects’ private data after hackers stole reams of knowledge from its membership database.

The corporate disclosed the breach on Wednesday, in line with an electronic mail despatched to prospects that TechCrunch has seen and verified. 

Rituals stated it recognized an “unauthorized obtain” of members’ knowledge in April that contained prospects’ full identify, date of delivery, gender, postal and electronic mail deal with, and cellphone quantity in addition to their most popular Rituals retailer, and account sort.

When reached by TechCrunch, Rituals spokesperson Eline van Malssen stated the hacker stole membership knowledge about prospects in Europe and the UK.

TechCrunch has realized that some prospects notified by Rituals are primarily based in america. The spokesperson confirmed the incident additionally impacts some U.S. prospects.

Rituals didn’t describe the character of the cyberattack and the corporate stated its investigation was underway to grasp how the info breach occurred. 

The cosmetics big is the most recent retailer to have buyer membership knowledge stolen up to now 12 months, following a string of intrusions at U.Okay. grocery and purchasing chains Co-op and Marks & Spencer, amongst others. Buyer data might be enticing targets for hackers who steal the info and extort the corporate for a ransom in trade for not publishing the data on-line.

When reached with questions concerning the incident, a Rituals spokesperson declined to touch upon whether or not the corporate obtained any communication from the hackers, to share a extra exact timeline of the breach, or to offer the precise variety of affected members, citing unspecified “safety causes.”

Based on its website, Rituals has over 41 million prospects in its membership database. The retail big made €2.4 billion euros ($2.8 billion) in income in 2025.