Rituals Data Breach Exposes Loyalty Program Info

Dutch cosmetics company Rituals has disclosed a data breach that exposed personal information of customers enrolled in its My Rituals loyalty program. The incident occurred in April, when unauthorized actors accessed and downloaded member data, affecting an undisclosed number of the program's more than 41 million participants worldwide.

The company detected the breach earlier this month and immediately blocked the intruders' access, containing the situation. Stolen data includes full names, email addresses, phone numbers, dates of birth, genders, and postal addresses. In some cases, details such as preferred store locations and account types were also compromised. Rituals confirmed that passwords and payment information remained secure and unaffected.

"We have initiated an in-depth forensic investigation to understand how this happened and what measures we can take to prevent a similar incident in the future," the company stated in a notice to customers. "We have also reported it to the relevant authorities." Affected members have been notified directly via email, with warnings to remain vigilant against potential phishing attempts. Rituals emphasized that no evidence has...