Archive — US — techcrunch
Cosmetics giant Rituals confirms data breach of customer membership records
Rituals, a Netherlands-based cosmetics company, confirmed a data breach affecting customer membership records, including personal information of over 41 million members. The unauthorized download occurred in April, impacting customers primarily in Europe and the UK, and some in the US. The investigation is ongoing, and Rituals has not disclosed specific details about the cyberattack.
Key points
- Data breach confirmed by Rituals affecting membership records.
- Unauthorized download of personal data occurred in April.
- Stolen data includes names, birth dates, contact information, and preferred stores.
- Affected customers are mainly from Europe and the UK, with some in the US.
- The incident reflects a larger trend of data breaches in retail, following similar attacks on Co-op and Marks & Spencer.
- Rituals has over 41 million members and reported €2.4 billion in revenue.
Why it matters
- Data breaches have become increasingly common, especially among retailers, impacting both customer trust and financial health.
- The rise in cyberattacks reflects the evolving nature of cybercrime, where member data is targeted for ransom.
- In 2025, businesses are prioritizing cybersecurity measures in reaction to continuous threats, with increased investments in IT security.
The breach at Rituals highlights growing vulnerabilities in customer data security in the retail sector and underscores the need for improved protections against cyber threats.